City firms ignore network security threat