If a company has experienced a passive attack on its IT infrastructure, how is the company’s security impacted?