According to InformationWeek's Cyber security division, 10% of businesses breached in 2019 had to close their doors.  Other statistics offered 37% suffered financial loss and 69% were forced offline for a period of time due to cyberattacks.

From my experience, the facts stated in the article seem dubious at best regarding the over all state of preparedness for cyber attacks in small and midsize businesses.  I venture to say that even more criminal activity happens daily that does not get reported as to protect the companies reputation.

Getting secure isn't difficult or terribly expensive, it takes intention and commitment to properly implement security standards and procedures.

https://www.darkreading.com/operations/10--of-small-businesses-breached-shut-down-in-2019/d/d-id/1336156