A recent report finds that state, local and educational organizations, despite having lower profiles, are still at risk of a cyberattack.