Why Small Businesses are Soft Targets for Cyber Attacks