What the breach cost calculator does
- The Breach Cost Calculator is a free tool that models the expected cost of a data breach for your organisation.
- Estimates are grounded in the IBM Cost of a Data Breach Report 2024 (global average $4.88M).
- Adjust the figure by records at risk, data type (PII, PHI, PCI, credentials), industry, region, and company size.
- You get an expected cost with a low-high range, a per-record figure, and a cost breakdown you can download.
- It also shows how real public companies’ share prices actually moved after their breaches.
What would a breach actually cost you?
Estimate the cost of a data breach for your organisation, grounded in the IBM Cost of a Data Breach Report 2024. Then see how real public companies' share prices actually moved after theirs.
This is an estimate for planning and board discussion, grounded in the IBM Cost of a Data Breach Report 2024 (global average $4.88M) and adjusted by data type, industry, region, and size. Actual costs vary widely; treat the range as indicative, not a prediction. The comparable-breach figures are real public market data from the PlayCISO Breach Cost Index.
Frequently asked questions
What does the breach cost calculator do?
It estimates the likely financial cost of a data breach for your organisation, producing an expected figure with a low-to-high range, a per-record cost, and a breakdown across cost categories, adjusted for your records, data type, industry, region, and company size.
What data is the estimate based on?
The model is grounded in the IBM Cost of a Data Breach Report 2024, which puts the global average breach at $4.88M, then adjusts by data type, industry, region, and size. The comparable-breach figures are real public market data from the PlayCISO Breach Cost Index.
Is the breach cost calculator free?
Yes, it is completely free to use and requires no signup or credit card.
How accurate is the breach cost estimate?
It is an estimate for planning and board discussion, not a prediction. Actual breach costs vary widely, so treat the range as indicative — useful for grounding risk and budget conversations rather than as a precise forecast.