How are online retailers ensuring cybersecurity and data protection?

I’d hate to think that attackers could take advantage of our data. If such giants are subject to cyber attacks, what about small companies.