Hacking is not an event, but the result of a chain of decisions made long before the attack.

When hacks are discussed, attention is usually focused on the moment of attack itself. But in reality, security problems begin much earlier — in the decisions and settings that a person makes long before any external influence.
Vulnerability is not formed due to a lack of protection, but due to the attitude towards risk. Overconfidence, haste, and the habit of simplifying solutions create the ground on which any threat becomes effective. At this moment, security has already been compromised, even if everything looks 'normal' on the outside.