Most of hacking is done by mass effort with maybe a couple percent of people that aren't doing basic things to protect themselves being affected. That couple of percent is enough to keep the hackers flush. (So please, follow basic cybersecurity steps, people.)
The plain truth of the matter, though, is that if a hacker or group of hackers is targeting someone individually for reasons, that person is in real trouble.
This has been a PSA for everyone chasing fame and clout.
I've tried to convince people that if we can have a No Nut November, we ought to be able to put together a No-Sales September or something. These mentally defective executives would absolutely go back to taking care of the customer if this were a practice.