Individual hackers of minimal skill are a threat to the IT infrastructure used by every organization in the US, so yes. If you mean is there a differential danger relative to other potential threats, then no.
My interpretation of your statement is that organizations in the US don't care about security and do the bare minimum to secure their systems, if anything at all
Sounds accurate, sadly