One in 10 data breaches discovered in 2016 had gone undetected for more than a year