Owners and administrators of smaller, less popular sites frequently believe that they won't be hacked because those targets are less appealing to hackers. If they want to steal information or cause trouble, hackers might pick larger sites. Any small site is valuable enough for their other objectives, which are more prevalent.