Small businesses need to educate staff to prevent a cyber-breach