Ponemon Institute’s $154 number is based on an analysis of 350 companies that suffered breaches in 2014. IBM Security sponsored this year’s Ponemon report. IBM: Verizon’s estimate seems unreasonably low, but Ponemon says there’s no evidence companies are under-insuring their cyber assets. Ponemon: Insurance doesn’t cover indirect costs or loss of business, which is why companies don’t cover them. The report only covers breaches between 5,000 and 100,000 records in size.”]