There are some misconceptions or myths that small business owners and small website owners often have. These myths can actually be dangerous, and often cost a lot of money in the long run.
I have a small business/website, no one is going to hack me because there are bigger fish out there.
This is unfortunately a very commonly held belief by small business owners and small website owners. The truth is, hackers attack ALL websites. Not just the bigger well known companies.
You might think, why would they waste their time on my site? The reality is, they're not. Hacker's create bots, which often are part of a botnet(network of tons and tons of computers infected with the bot software). These bots constantly scour the internet, trying to break into admin panels of sites, trying to inject malicious code through contact forms. Try to repurpose forms into spam delivery systems. These bots also often try multiple methods of breaking into a site, looking for common vulnerabilities, often found in earlier versions of software.
Hackers deploy these bots and they go to work with minimal effort by the hacker. Once a bot finds a vulnerable site, it often reports back to the hacker - "Hey this site is vulnerable!". The hacker then either manually or using a script, breaks into the site, and often changes the content of the site in such a way to make money off of your site, often displaying ads for some less than family friendly products and services. They can completely sabotage your online presence, get you blocked from google search due to malware. If you offer online services you're whole business could be in jeopardy. They may steal any information you have in your site's database - including any client information you have stored there. They can send spam to your clients in a way that it looks authentic like it came from you. They can infect your clients computers with malware by providing them download links to files that initially look like they could really be from you. Hackers may even hold your site ransom, demanding money from you or your business until you pay them[Do not pay them, seek help from law enforcement and a web development/security company, At SpinGroup we've handled cases like this and restored client's sites and locked hackers out.].
You may be thinking this is scare tactics and worst case scenario, but actually it's a very real problem and it's not a new one.