Hackers are more likely to target educational institutions than private businesses, government survey shows