Companies who don't stop hacks could be breaking the law, warns the SEC

The FBI estimates some e-mail scams have led to $5 billion in losses since 2013.