Fix grammar and sentence structure.

I almost think I need to expand my statement about small merchants. For example: http://www.firstdata.com/en_us/insights/data-breach--non-monetary-damages-are-painful.html?cmpid=soc.tw.1DCCorporate.fd.sf28556216&sf28556216=1 "57% of the people who had received a breach notification letter from a business said they lost trust and confidence in the organization. Worse, 31% of those surveyed said they terminated their relationship with the organization."

Additionally, perhaps the connection wasn't made clear enough, but with a breach putting you to Level 1 (with audits now required) that is a large financial burden that is still a direct cost of continuing to do business as a result of a breach.

Therefore, I'd rather modify the paragraph to more directly address the financial impact that move the citation. My largest motivating factor (particularly for the Drupal community) is that most eCommerce implementations are small mom and pop shops OR larger organizations that have eCommerce as one of many features. In both cases, their perception is that they low volume transaction carries with it a low penalty when a breach occurs. And while that is true (based on absolute dollars), it's still not trivial.

You bring up many good points here. It all boils down to either a) moving the citation because the case for a financial impact is not as strong for smaller merchants or b) keeping the citation but making a clearer connection to the finanical impact versus just the overall likelihood of experiencing a breach. I'm leaning towards the latter only to achieve the objective of motivating smaller merchants to still take this seriously.