“The climate the press has created is that hackers are somehow supernatural and can’t be stopped; everybody falls victim,” says Gene Spafford, a Purdue University computer professor and executive director of its Center for Education and Research in Information Assurance and Security. “So long as the head of IT can say ‘It happens to everybody, even the government and security vendors,’ it will be difficult to blame them for not taking appropriate measures.”