Hacking the website is a criminal act and you're not legally responsible for other peoples' criminal acts, even if you dress like a whore or leave your doors unlocked. The programmer, however, is another matter. Whoever programmed this is certainly liable to his customer for any damages. He dressed you up like a whore and drove you into the bad part of town, pumped you full of roofies and dumped you on the curb, dazed and half naked and with a sign on your back saying "FREE ASS". (Jeremy, I hope this metaphor is okay by you)