Sure, but I believe most hacks are actually social engineering not network or digital security breach. Like 2 corporation / agency persons not recognizing, that they are both talking by email through a literal man-in-a-middle for half a year, agreeing to 100k deal through the guy and he switches up the account credentials in the last mail and they get sent to bookkeeping and money gets payed to random person in some African country. This one is from experience, btw.