Industry has spent millions of dollars and thousands of hours trying to protect itself from cybercrime.