Power companies unprepared for hacking attacks