You didn’t install two factor authentication in your client’s managed environment and now a hack occurred. 

Did you commit negligence? Are you liable for damages? 

My answer might surprise you. Listen up.

Music: "Werq" Kevin MacLeod (incompetech.com)