To answer a different question of “why don’t we see more hacks of smaller orgs?” - Facebook is an incredibly juicy valuable target, worth investing time in -

To answer a different question of “why don’t we see more hacks of smaller orgs?” - Facebook is an incredibly juicy valuable target, worth investing time in - FB has a very complex application and massive codebase. Your Django web store is far more straightforward - smaller orgs can get away with not reporting, and don’t get visibility when they are compromised