Work out breach exposure estimate instantly with clear inputs, formula shown and shareable results.
Per-record breach costs published in industry studies bundle detection, notification, legal, regulatory and lost-business components. Sensitive categories — health records, payment credentials, government identifiers — cost several times more because of mandatory notification, higher fraud rates and larger regulatory exposure, so blending a flat per-record figure across a mixed dataset understates the total.
Breach exposure
cost = ordinary records x cost per record + sensitive records x cost per record x sensitivity multiplier
They are averages across very different incidents and do not scale linearly — large breaches have much lower per-record costs than small ones. Use them for order-of-magnitude planning only.
Lost business and customer churn in most studies, followed by detection and escalation. Regulatory fines are large but less frequent than the operational costs.