Often small businesses do not pay enough attention to website security issues. Some feel they don't have particularly sensitive information on their website. Others ask whether their website will be targeted at all.
The answer to the second question is yes. Being a small player is no protection. A wolf doesn't go after the biggest meal; it goes after the easiest one. Hackers are no different. They scan the herd for the weakest member.
How do they do this? They use automated methods to attack large numbers of computers until they find an obvious weakness. For example, a brute force attack may use a large number of username and password pairs until it finds one that works.
In today's tough economic times, more companies are looking for ways to do more with less. As economic growth slows competition grows more fierce. Instead of battling over the share of a growing market, companies struggle to maintain their client base. Competition becomes a zero-sum game; your competitors success likely means you lose clients.
In this environment businesses often stand pat. They eliminate or delay projects in order to cut costs and wait out the storm. Ironically this is what makes it so important to keep your eye on the prize during a recession. This is true as true for web projects as any other. Since so many businesses are cutting web projects, it makes web development services easier to find and less expensive.