It means that the business was accessed by unauthorized third parties. As a result, business activity could have been disrupted and information stolen. It could also lead to other criminal activities, such as hackers using banking data to steal funds, or blackmail.