Organizational size is irrelevant. Adversaries target smaller businesses like coffee shops, apartment complexes, and TV stations because they often fail to implement proper IoT device management practices, like firmware patching, password rotation, and certificate rollout.

Source: Dark Reading: Cloud