It's not unusual for firms to not even realize they have been breached. Hackers get in and not only copy and steal information, they look for ways to go after the companies vendors and customers and trick them into paying for invoices very similar to the ones they find in your system.