On average shareholder value drops 9% year after major cyber incident