As far as a lot of smaller companies go, there's always a risk but they have a reasonable amount of security through obscurity. If they take reasonable steps, they are pretty safe because they're not public targets and don't have the notoriety of a U.S. Air Force or Pentagon.