$3 million hack