Real company, legitimate web site, but hackers are using a legitimate site to mask their activities and existence.
Not every person, organization or company can justify the high costs of high security. As a business owner you assess the value of your potential losses against the cost to repair/restore. Having someone damage your web site is often easy to spot. Having someone plant some additional web pages using unusual names to many will look like some operating system or network files and ignore them.
Fortunately larger companies invest in advanced security and screening YET they are hacked into.