Uber’s 2016-2017 hacking crisis is a prime example of a badly conceived strategy of companies waiting and hoping their crisis isn’t discovered