When businesses get hacked and lose customers’ personal data, boards and owners can come under fire from not only customers but shareholders.