Small firms are taking fraud protection too lightly, says Visa Canada

Forty-one percent of small businesses surveyed by Visa Canada said they
don't believe data thieves and hackers will target them because of their
size.

Where have we heard that before?
Isn't there some security adage about the hackers (aka criminals) going or "the low hanging fruit" - the easy to get at stuff - first?