The frequency and cost of cyber-attacks on small to medium businesses is growing