If you spend more on coffee than on IT security, you will be hacked.
You win some and you lose some, but you get paid for all of them