When it comes to choosing which organizations to steal from, cybercriminals are not fussy. They're not particularly bothered about what an organization does, but only whether the organization is an easy target and has valuable data.