Are You Liable for a Cyber Attack?