Merck cyberattack’s $1.3 billion question: Was it an act of war?