If you get hacked in the US, do you have to take legal action yourself, or does the government automatically investigate?