Ponemon: External Attacks Costing Organizations $3.5 million a year