40% of SMBs say an attack costing $100,000 or less could put them out of business.