because of easy-to-use hacking tools online, says the National Crime Agency.
But there is a way of legally hacking company websites - and even getting paid for it.
Jake Davis, known online as Topiary, was arrested for illegal hacking in 2011 but now works on the right side of the law in cyber-security.
He says that hackers would do it without getting paid anyway, so the money is just a bonus.
Therefore, they've "been diverted away from doing something malicious, because they get everything they want and a little bit of cash too".
"Facebook are particularly good, they have got a £500 minimum for disclosing bugs to them."