UK businesses vulnerable to hackers