A DDoS attack can cost an organization more than $2.5 million in revenue. Small and midsize companies are tempting targets because they are armed less with heavy tech investments, services, and staff. When DDoS attacks become too large and create collateral impact, all traffic to that targeted host starts getting blocked or “blackholed” This effectively takes those businesses offline. Companies often overestimate the “protection” offered by ISPs and cloud service providers, such as Amazon Web Services. These organizations can only provide so much protection.”]
Source: https://www.darkreading.com/cloud/why-size-doesn-t-matter-in-ddos-attacks