Small businesses underestimate financial damage of cyberattacks