Big Companies Thought Insurance Covered a Cyberattack. They May Be Wrong.