Cyber risk is becoming a hold-period problem for private equity firms