Dear Goerge,
Any website is at risk. Small websites might be more vulnerable because they are less likely to have resources and expertise to detect and respond quickly to attacks. Malware may infect your customers computers when they simply browse your website. Targeting small websites with low traffic allows hackers to avoid detection longer and cause more damage.
Thanks.