Lessons from last week’s cyberattack