One of the assumptions of small-to-medium business owners is that they fly under the radar of most hackers. It's easy to assume that hackers are looking for the biggest payout by targeting the biggest companies. There are several reasons this is simply not the case:
Corporations are getting their acts together
Spending on business security has more than doubled in the last decade.