Although businesses today are becoming more aware and familiar with the increasing need to protect their IT (Information Technology) systems and data there remains a common misconception among small and medium businesses that they are not a target because they either are too small to notice, or they do not possess any non-public personal information that a bad actor would want to steal and sell on the dark web.