The average SQL injection breach took almost 140 days to discover, according to the Ponemon Institute.