Yes, small businesses are at risk of cyber-attacks. They can often be more vulnerable than larger organisations as they may lack the resources to invest in robust security measures. Cybercriminals are aware of these vulnerabilities and may target small businesses.