The problem with looking at this sophisticated target and Michaels attacks can make you think:
That only happens to the big companies – my business does not provide a large target, so I don’t have to worry.
That is unfortunately not true. Small organizations need to do the right thing and secure their resources as much as possible, since thety will get different attackers, different attacks. And undefended you will get hammered as the smaller attacks pile up.