Many organizations believe that they are not a risk of cyberattacks because they are 'too small for cybercriminals to bother' or 'don’t have anything that an attacker would want'. This isn’t true for cyberattacks in general or data breaches in particular. Big organizations are common targets of cybercriminals due to their rich troves of sensitive data, and these breaches make the news for the same reason. However, big companies are not the only ones that suffer from data breaches. In fact, 76% of IT leaders say that their organizations have lost sensitive data in a data breach. Any organization can be targeted for data breaches. While big companies are prime targets, cybercriminals also like taking advantage of low-hanging fruit. If an automated scanner can find an unsecured cloud repository, a web application has an SQL injection vulnerability, or an employee falls for a phishing scam, the cyberattacker won’t turn down the opportunity because the leaked dataset is 'too small'.