Benchmark dataset

The dated, sourced reference dataset behind the calculators: cost per record by industry, breach frequency by sector, security cost-mitigation factors and published regulatory penalties. Every figure carries a verification date and a link to its primary source. Benchmarks as of Jun 25, 2026.

Cost Per Record by IndustryAverage data breach cost and cost per record by industry, from published IBM/Ponemon analysis — dated and sourced.Breach Frequency by SectorIndicative annual breach probability by sector, derived from Verizon DBIR incidence data.Security Cost-Mitigation FactorsHow much each security control reduces breach cost, from IBM's cost-mitigation factor analysis.Regulatory Penalties ReferencePublished penalty thresholds under GDPR, HIPAA, CCPA/CPRA and PCI DSS, each linked to the primary statute or standard.

Disclaimer. BreachCostLab provides cost and risk estimates for informational purposes only, based on published industry benchmarks (e.g. IBM/Ponemon Cost of a Data Breach, Verizon DBIR) and publicly available statutory figures as of the verification date shown (Jun 25, 2026). These figures are estimates for planning, not a prediction of the cost of any specific incident, and are not legal, financial, insurance, or compliance advice. Actual breach costs vary widely; for regulatory obligations consult qualified counsel. Always verify current figures with the cited sources.