To quote Willie Sutton, it is where the money is.Most businesses, both large and small, hold at least some personally identifiable information of customers or employees, such as names and addresses, Social Security numbers and credit card information.