Financial service businesses, particularly small and medium sized ones, are vulnerable to attacks by cyber-criminals. Few are prepared