Defend your databases, firms told