Everyone is a target: no firm is too small for cybercriminals