Private sector largely ignorant of cyber threat