Data Breach Cost Calculator

Records you hold (people)

Primary sector

Controls you already have

Encryption at rest and in transit Tested incident response plan MFA on all critical systems Tested, isolated backups Centralized logging / monitoring Security awareness training

Estimated total breach cost (range)

$0 - $0

How we estimate, and what we assume. We use a per-record cost that varies by sector (a reasonable industry estimate, not a quoted figure), multiply it by your record count, and add a fixed incident-response and notification baseline of roughly $90,000 that most breaches incur regardless of size. We then apply a modest discount for each control you have in place, because mature controls are consistently associated with lower breach costs and faster recovery. The low end of the range assumes a contained incident handled well. The high end reflects a worse case with legal and regulatory exposure. These figures are for planning conversations only. They are not a forecast, and they exclude contract penalties, lawsuit settlements, and brand damage that vary widely.

Questions

How is breach cost calculated?

We start from a per-record cost estimate that varies by sector, multiply by the number of exposed records, add a fixed incident response and notification baseline, then apply a discount for security controls you already have in place. The result is a range, not a single number.

Are these numbers accurate for my company?

No estimate can be exact. The figures are reasonable industry estimates meant for planning and budgeting conversations, not a forecast. Actual costs depend on legal exposure, regulatory fines, contract penalties, and the specifics of the incident.

What counts as a record?

A record is one individual whose personal data you hold: a customer, patient, user, or employee. If a single person has multiple data points, that is still one record for this estimate.

How do controls reduce the estimate?

Controls like encryption, an incident response plan, MFA, and a tested backup strategy are associated with lower breach costs because they reduce blast radius and recovery time. We apply a modest discount per control to reflect this.

Is this calculator free?

Yes, it is completely free with no signup. If you want a tailored risk and cost analysis, book a call with our team.