“Hackers aren’t interested in my little business.” If that’s the standard line you use when a security consultant pitches you on their services, you’re making a mistake.