The staff are helpful, and they know which buttons to click to get their jobs done. But ask them who the internet provider is, and you'll get a shrug.
Most small business owners think they're too small to be targeted, but hackers no longer pick targets. They use automated tools that scan thousands of businesses per hour, looking for easy entry points.
Microsoft has something called "Patch Tuesday." Every second Tuesday of the month, they push out updates to millions of computers worldwide.
Modern file sharing makes it incredibly easy to get work done. You click Share in OneDrive or Google Drive, send a link, and the other person gets straight to work. That ease is exactly why this problem exists.