Skip to content
ENExplore Calculators

Breach Exposure Estimate Calculator

Work out breach exposure estimate instantly with clear inputs, formula shown and shareable results.

About Breach Exposure Estimate Calculator

Per-record breach costs published in industry studies bundle detection, notification, legal, regulatory and lost-business components. Sensitive categories — health records, payment credentials, government identifiers — cost several times more because of mandatory notification, higher fraud rates and larger regulatory exposure, so blending a flat per-record figure across a mixed dataset understates the total.

Formula

Breach exposure

cost = ordinary records x cost per record + sensitive records x cost per record x sensitivity multiplier

Worked example

With the default values below, Breach Exposure Estimate Calculator returns Estimated breach cost of $66,000,000. Change any input above and every figure here is recalculated in your browser.

Inputs used

Records potentially exposedminimum 1
250,000
Cost per exposed recordminimum 0
165
Share containing sensitive dataaccepts 0–100 %
40 %
Cost multiplier for sensitive recordsaccepts 1–20 x
2.5 x

Results

Estimated breach cost
$66,000,000
Sensitive records involved
100,000
Blended cost per record
$264.00
Share of cost from sensitive records
62.5%

Step by step

  1. 1Values used
  2. 2Breach exposure
  3. 3Estimated breach cost= 66,000,000
  4. 4Sensitive records involved= 100,000
  5. 5Blended cost per record= 264.00
  6. 6Share of cost from sensitive records= 62.5

Assumptions and limits

  • The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
  • In particular, this calculator does not take inflation, tax or compounding frequency into account.
  • Figures are rounded for display to 2 decimal places, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.

How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.

Frequently Asked Questions

Are per-record figures reliable?

They are averages across very different incidents and do not scale linearly — large breaches have much lower per-record costs than small ones. Use them for order-of-magnitude planning only.

What is usually the largest cost component?

Lost business and customer churn in most studies, followed by detection and escalation. Regulatory fines are large but less frequent than the operational costs.

Related Calculators

Breach Exposure Estimate Calculator | Calcrivo