What would a data breach cost you?
Answer 5 questions to get an estimate of what a breach would cost your company, split into the cost categories of IBM's yearly study.
- No credit card, no commitment
- Based on IBM's 2026 study
- Calculated in your browser
Question 1 of 5
What industry are you in?
Question 2 of 5
What is the most sensitive data you hold?
Question 3 of 5
How many such records do you hold?
Question 4 of 5
Where are most of your customers?
Question 5 of 5
What is your annual revenue?
Your results are ready
Leave your details to see the full report now:
- Where the money goes: detection, lost business, response and notification
- How long it takes to find and stop a breach
- What to do first to lower the cost
- The cost as a share of your revenue
What a breach would cost you
Cost breakdown
- Detection and escalation
- Lost business and customers
- Post-breach responseLegal, fines, customer support
- Notifying people and regulators
The estimate reached IBM's average and stops there. Breaches of millions of records cost far more.
Capped at 10% of annual revenue, as IBM's averages come from large organizations.
Time
- Average days to find and stop a breach
Under GDPR, a breach of personal data must be reported to the regulator within 72 hours.
An estimate based on IBM's averages, which mostly come from large organizations.
We have your details. One of our data and AI engineers will get back to you within one business day to go through the results with you.
Three steps that lower the cost
How we calculate
The calculation is based on the Cost of a Data Breach study IBM and the Ponemon Institute publish every year, drawn from hundreds of real breaches. Anything that is our own assumption is marked as one.
| Line | Calculation | Source |
|---|---|---|
| Cost per record | Customer personal data $160, employee personal data $168, intellectual property $178, anonymized data $115. | IBM Cost of a Data Breach 2025. The 2026 report doesn't publish per-record costs. |
| Cap | Records × cost per record, up to the industry average: healthcare $6.64M, finance $6.29M, technology and industrial $5.50M, other industries the global average, $4.99M. Customers mostly in the US: up to $11.5M. | IBM 2026. |
| Revenue cap | The cost never exceeds 10% of annual revenue. | Our assumption, as IBM's averages come from large organizations. |
| Range | 70% to 130% of the estimate, never past the caps. | Our assumption, as costs vary widely between incidents. |
| Breakdown | Detection and escalation 33%, lost business 30%, post-breach response 28%, notification 9%. | The cost split in IBM's 2024 study. |
| Time to identify and contain | 247 days. | IBM 2026. |
Each answer range is calculated at its midpoint. Exchange rate: $1 = ₪3.6.
Questions
We're a small company. Are we a target?
Yes. Attackers look for the easy way in, and small companies are usually less protected. Their absolute cost is lower, but relative to revenue it often hurts more.
Does cyber insurance cover this?
Partly. Insurance usually covers some of the response and notification costs, but not lost customers and reputation, which are almost a third of the cost.
How fast do we have to report a breach?
It depends on where your customers are. Under GDPR in Europe it's 72 hours to the regulator; US states and Israel have their own rules.
