Cybercrime costs a business $3.8 million/year, study finds