Data Breach Cost Estimator

Data Breach is serious and wide-spread. Don’t get caught unaware and unprepared.

Based on current research data there is a substantial cost to each data breach for the organization. This is never trivial or straight forward. However, there are some baselines we can use to make a guess at an estimate(*) of the expected cost. We use current research by IBM as baseline and add our own extrapolation. You can play with the sliders below the basic breach data to adjust for your current situation. Don’t forget to scroll down to see all sliders.

We also make an estimate as to the potential savings if you were to use tools to mitigate and manage the breach. Our assumptions are based on similar logic and influenced by the sliders.

Informational Only

This is for educational purposes only. We do not make any of the breach detection tools and many of mitigation elements are based on improved internal processes. We suggest you work closely with your security vendors, e.g. SilverSky, Broadcom, or SecurityHQ. If you need additional recommendations please feel free to contact us.

Your Turn:

Basic Data

avg USA 28000

Mitigating Factors (please scroll)

Not Prepared Very Prepared

Rarely Diligently

Rarely Frequently

Not ready Very prepared

Rarely Always

Rarely Extensively

None Extensively

Undefined Fully defined

None Fully insured

No customer Every one

No mitigation On standby

No delay Extensive delay

None Many devices

No We are fully mobile

Not started Fully compliant

No cloud We are all cloud

Inhouse only Many parties



US average cost $7.35 (2017)

Estimated Savings
with Mitigation Solutions


We offer this as educational tool and hope you can use it to improve your security processes and to prevent future breaches. This may come in handy especially when looking for reasoned independent cost justification for projects that are in planning.

*Results are estimates loosely based on 2017 Study data conducted by Ponemon Institute research.

All calculations are based on assumptions for averages and industries. Those may not apply to you and should be validated.