If a thief invades your brokerage account

I have about $500,000 in an online account with a major brokerage house. What recourse do I have if an identity thief or hacker breaks into the brokerage's computer system and steals my money? A friend says I'm out of luck, but the brokerage must have some obligation to return the money, right?