Do cybercriminals only target large organizations?

No. Organizations of every size are targeted. Small and mid-size organizations are often attractive targets because they may have fewer internal resources dedicated to cybersecurity while still maintaining valuable data and critical business systems.