Why would the owner of a small business expect that they are not a target of cyber criminals any more than they would not be a target of old fashioned crime. Anyone who has run a business knows that crime, in whatever form, can destroy businesses and livelihoods. This could be as a result of arson, theft or even blackmail. Where ever there is easy money to be made, criminals will be found close by. The same maxim applies to cyber crime and perhaps even more so given that hackers ignore boundaries.
Why SMEs shouldn't be putting cyber-security on the back burner