Don’t think that small businesses and ordinary people are safe. The size of a company doesn’t make you immune to cyberattacks. In some cases, small firms are even more enticing for malicious actors as such businesses often don’t pay proper attention to their cyber security. They can also be a step to gaining bigger fish. However, small companies themselves offer hackers a lot of prospective personal data they can use to achieve what they want - control, access, money, etc. - as well.
The second part of this don’t is about individuals. Hackers implement a tremendous number of schemes. Some of them are oriented on immediate gains - small amounts but from millions of people. Some think bigger and consolidate data for lucrative targets. Ordinary people are frequent targets in all schemes - no matter how big and complicated.
So, don’t underestimate cyber security in every sphere where you engage with the cyber world.