A growing number of organizations are taking longer to get back on their feet after an attack, and they’re paying high price tags to do so — up to $2M or more.