No one starts playing baseball in the major league. The typical major league ball player starts in a Babe Ruth type league, goes on to play in high school, then college, then the minor leagues, and finally the majors. Even once they make it to a pro team, like my beloved Baltimore Orioles, they often do not start every day right off the bat. They work hard to earn a spot on the regular roster. It is only once they make it to the big's that most people learn about them and what they can do. The number of people that knew Cal Ripken before he played for the O's is small. The number of people that know Cal Ripken now, is vast. Many organizations feel they are not going to be a target of a cyber attack or data breach. The common mentality is that they are too small or not important enough or they don't make enough money. This way of thinking is too narrow for today's world and very dated.
Target, Home Depot, Jimmy Johns...the attackers didn't start with them. This wasn't a trial run. This was their major league debut. They started in the minors. Small and midsize businesses were the training ground where their skills were perfected.
And coming up behind them is the next wave of major league players ready to hit more home runs that their predecessors. Where do you think they are learning their skills? Your network is the practice field.