Are people “targeted” by hackers?

Attacks are often not “targeted.” They are purely opportunistic. How do you protect yourself when this is the case?