> But if you require everyone to take adequate measures to physically secure their houses, you don't even need laws and morality! If laws and morality were suf

> But if you require everyone to take adequate measures to physically secure their houses, you don't even need laws and morality! If laws and morality were sufficient protection against malicious actors, I might agree with you. However, in a world where cyber vandals are often beyond any accessible jurisdiction (and may even be supported by their local authorities), laws and morality are clearly not effective at keeping unauthorized users out of private systems. As such, the responsibility for keeping private information secure naturally falls on the people running the systems. Putting up a network firewall (or at least requiring authentication) would have prevented the damage described in the OP, and is a rudimentary security measure that has been common practice for decades. The people who suffered significant damage from this attack should strongly consider outsourcing system administration to someone who knows what they're doing.