$1 million to fix, replace compromised equipment after cyber "intrusion"