A shadowy group that stole and dumped the NSA’s most powerful hacking tools still has implications for how companies think about digital risk today.