How cyber insurance helped with breach recovery -- or not