Ecommerce hit by failure to report attacks