Data security can be a big problem for many small businesses, largely because hackers know most companies of this size do not impose tough security measures. This is usually due to either a lack of knowledge about the threats out there, or because the perceived cost of being protected is too high. Internet bots do not care how large or small a business is. They are just automated hacking programs going through a list. If your server or PC somehow makes it onto that randomly generated list then the damage caused can be extensive.
Being up-to-date with security measures should be high priority no matter the size of your business. Again, unless you are in the IT industry, it is near impossible to keep up with all the latest threats such as malware, viruses, ransomware, SPAM, and the preventative measures required to protect your data.