Yes they can. The most efficient way to hack a wallet is through a phishing sites. They are sneaky little sites that will steal all of your information. You can avoid it though by activating the two factor authentication of your wallet.