UK firms in the dark around the impact of cyber attacks