Every small business owner needs to plan for an attack.  Here is a book from JSCM Group that details the security risks and what a business needs to do about it.  Don't be left vulnerable.