Concerned about reputational damage and lost business, many companies are underreporting cybercrimes.

Half of cybersecurity respondents to ISACA’s “State of Cybersecurity 2019,” a survey of 1,500 cybersecurity professionals from each continent, said they believe most enterprises underreport cyber incidents they are required to disclose. What’s more, a quarter believed enterprises underreport incidents they’re not legally required to make public as well.