US military contractor spent years at total mercy of Chinese hackers