Who's really responsible for hacker attacks