Yes they can be hacked because they are also in digital form like your social media account that requires your email and password or a certain private key. Once these information got leaked or exposed by a hacker, then it's the end of the road of your crypto assets already.