It just goes to show that any organisation large or small has to prepare for the possibility of a cyber attack. Wherever Personally Identifiable Information (PII) is, it will be a target for an attack. It is no longer acceptable for any organisation to say that they have nothing of value in our digital and social world. Technology can always help but user awareness and education must also play a part in your cyber defence strategy.