Fines on the horizon for business over cyber attacks