There is a category of spending most business owners cannot name: the cost of IT assets you own but no longer use.
Most hardware leases are signed, filed, and promptly forgotten.
Most small business owners think they're too small to be targeted, but hackers no longer pick targets. They use automated tools that scan thousands of businesses per hour, looking for easy entry points.
Modern file sharing makes it incredibly easy to get work done. You click Share in OneDrive or Google Drive, send a link, and the other person gets straight to work. That ease is exactly why this problem exists.