If an organization has been breached, it’s more likely to be targeted again