Clearly, the perceived threat of cyber attacks varies across industry verticals, but the actual threat level does not differ greatly. Most, if not all verticals have data worthy of a cyber attack and are, therefore, targeted on a regular basis. Due diligence should be universal across the spectrum of industry verticals.
https://www.infosecurity-magazine.com/news/verticals-vary-widely-prioritizing/