Cyber attacks drain $3.7B from UK SMEs annually