No business is shielded against a potential cyber security attack. Any business that stores or maintains personal data is at risk — there is no exception. Unfortunately, some small business owners think that because of their small size, they're somehow off the radar of cyber criminals, but you should not make this mistake. If anything, small businesses are sometimes a prime target.
The main goal of cyber criminals is generally to gain information for financial use.