Is it your fault that you got hacked?