Rand Corp. study finds that the typical cost of a data breach is less than $200,000. The study also found that cyber incidents cost firms a mere 0.4% of annual revenues on average. In May 2015, the Ponemon Institute placed the cost of an individual data breach at $3.5 million. Financial services (including insurance) endured the greatest number of security breaches, followed by healthcare, government, education, manufacturing, and information services. Rand researchers tracked four types of security events: data breaches, unauthorized disclosure of personal information, security incidents, privacy violations, and phishing/skimming incidents.”]
Source: https://www.darkreading.com/attacks-breaches/rand-study-average-data-breach-costs-200k-not-millions