What we should learn from $45M hack