If your website handles any kind of user data, chances are it’s being watched. And not just by customers. Hackers, too.