Businesses holding on to decommissioned tech over breach concerns