Recently some people working for a client of mine expressed the sentiment that they felt that their business wasn't a target for an actual hacker (as opposed to automated attacks). This despite the fact that they had been attacked on two different occasio...