While larger businesses and those holding sensitive data are often targeted, small and medium-sized enterprises (SMEs) are particularly vulnerable due to generally having fewer cybersecurity measures in place.