Great article from the team at Sucuri about why websites get hacked:
https://blog.sucuri.net/2015/02/why-websites-get-hacked.html
Covering automation, targeted vs attacks of opportunity and the motivation behind hacking, this article is a great introduction for the non technical user.