Criminal hackers aren't nearly as focused on your business' administrative accounts as they are individual employee accounts. Why? Because admin accounts rarely have direct access to highly valuable information like social security numbers, protected health information, etc.