If you're not concerned about data security as a nonprofit, you should be. Hackers tend not to deliberately target nonprofits the way they do manufacturers and financial institutions, for example. But a lot of hacking is actually automated and based on exploiting targets of opportunity, and a lot of nonprofit IT security is underfunded and unprepared.