A combination of factors like vilification of hacking, corporate PR managing embarrassing incidents and responsible disclosure can cause most of this activity to be under-reported.