The average breach remains undetected for 200+ days, increasing cost and damage.