"A small county would have limited funds left for cybersecurity, and attackers understand and know this type of information," says Chris Morales, head of security analytics at Vectra. "This is why local governments and small businesses have always made for easy targets."