A few years ago cyber attacks mostly targeted large companies and government organisations. But that is no longer the case