More to the point who isn't. From the ACSC Threat Report 2017 they list
All as targets including what makes all of them a target.
Protection from cybercrime is more than checking the boxes for compliance. The baddies only need you to make one mistake so a coordinated protection environment from the datacentre to the end user is important. Firewalls, anti-virus, threat monitoring and other products are vital enforce policies and protect the environment - ensuring they are all coordinated and enforcing consistent policy as important. At the start of the chain though is the end user and how they react to the threats that appear on their devices should be the first line of defence.
We offer a range of solutions and services to determine your current security status and then products and services to close any vulnerabilities found.
The threat is real and the baddies are getting better. For more information on the state of cyber security and government assessment of the cybercrime threat download the ACSC 2017 Threat Report.
Along with this the Mandatory Data Breach Notification will be in force from February 22, 2018. Where protection of any personally identifiable information is paramount.