Don't believe you are safe because you are a small target. Check out these statistics affecting small businesses (with sources):
Facebook does not know who is behind the attack or how much information they stole. What can you do about it?
How often have you heard someone say, "But it worked fine yesterday! Nothing changed! Why doesn't it work now?"
GandCrab 4.1 can attack your computers when you visit an infected webpage on a WordPress site even if you don't click on anything.