# Data breach cost calculator: estimate the cost of a breach and your annual risk

> A data breach costs roughly the number of records exposed × the cost per record, adjusted for your security controls, plus any regulatory fines. IBM’s 2026 Cost of a Data Breach Report puts the global average breach at USD 4.99 million and stolen customer personal data at USD 192 per record. A tested incident response plan, encryption and security automation reduce the cost; third-party involvement and skills shortages increase it.

- Interactive version: https://infikeytechnologies.com/tools/data-breach-cost-calculator
- Type: free instant calculator
- Category: Security & compliance
- Last reviewed: 2026-10-05
- Publisher: Infikey Technologies (https://infikeytechnologies.com)

## Example result (default inputs)

| Input | Value |
| --- | --- |
| Currency | USD ($) |
| Records that could be exposed | 50,000 |
| Cost per record | 192 |
| Possible regulatory fine | 0 |
| Chance of a breach in a year | 10% |

**Estimated cost of a breach: $9,600,000.** A breach exposing 50,000 records could cost about $9,600,000. With a 10% yearly chance, the expected loss is about $960,000 a year.

Few cost-reducing controls in place. Adding them could cut the cost of a breach by about $4,128,000 — an incident response plan and encryption are the quickest wins.

| Metric | Value |
| --- | --- |
| Detection & escalation | $3,168,000 |
| Lost business | $2,976,000 |
| Post-breach response | $2,592,000 |
| Notification | $864,000 |
| Effect of your controls and risk factors | +0% |
| Expected yearly loss (10% chance) | $960,000 |

### Breach cost by category

| Item | Value | Detail |
| --- | --- | --- |
| Detection & escalation | $3,168,000 |  |
| Lost business | $2,976,000 |  |
| Post-breach response | $2,592,000 |  |
| Notification | $864,000 |  |

- The split by category follows IBM’s 2026 averages. The effect of each control is an Infikey modelling assumption based on the direction of factors in IBM’s reports, not an exact figure.
- Use the expected yearly loss to compare against the yearly cost of security measures.

Open this result on the website: https://infikeytechnologies.com/tools/data-breach-cost-calculator?currency=USD&records=50000&cost_per_record=192&fine=0&likelihood=10

## Use from a link or API

Add these query parameters to https://infikeytechnologies.com/tools/data-breach-cost-calculator (pre-filled page), https://infikeytechnologies.com/tools/data-breach-cost-calculator.md (this plain-text page) or https://infikeytechnologies.com/api/tools/data-breach-cost-calculator (JSON).

| Parameter | Meaning | Accepted values |
| --- | --- | --- |
| `currency` | Currency | one of USD, INR, AED, GBP, EUR |
| `records` | Records that could be exposed | number from 1 to 10000000000, default 50000 |
| `cost_per_record` | Cost per record | number from 0 to 10000 (in the chosen currency), default 192 |
| `controls` | Controls in place | comma-separated list of ir_plan, automation, encryption, training, devsecops |
| `risk_factors` | Risk factors | comma-separated list of third_party, shadow_data, skills_gap |
| `fine` | Possible regulatory fine | number from 0 to 100000000000 (in the chosen currency), default 0 |
| `likelihood` | Chance of a breach in a year | number from 0 to 100 (%), default 10 |

- Small online business: https://infikeytechnologies.com/tools/data-breach-cost-calculator?currency=USD&records=10000&cost_per_record=192&risk_factors=skills_gap&fine=0&likelihood=15
- Mid-size SaaS company: https://infikeytechnologies.com/tools/data-breach-cost-calculator?currency=USD&records=100000&cost_per_record=192&controls=ir_plan%2Cencryption%2Ctraining&risk_factors=third_party&fine=250000&likelihood=10
- Healthcare provider: https://infikeytechnologies.com/tools/data-breach-cost-calculator?currency=USD&records=200000&cost_per_record=400&controls=encryption%2Ctraining&risk_factors=shadow_data%2Cthird_party&fine=1000000&likelihood=12

## How it is calculated

- **Breach cost**: records × cost per record × (1 + Σ control and risk factor adjustments) + fine
- **Expected yearly loss**: breach cost × yearly chance of a breach
- **Adjustments used**: IR plan −10%, automation −15%, encryption −8%, training −5%, DevSecOps −5%; vendors +10%, untracked data +10%, no security staff +10%

## What makes up the cost of a data breach

| Category | Includes |
| --- | --- |
| Detection & escalation | Forensics, investigation, audits, crisis management, executive time |
| Notification | Telling regulators and affected people, legal advice, call centres |
| Post-breach response | Credit monitoring, legal costs, regulatory fines, help desks |
| Lost business | Downtime, lost customers, reputation damage, higher cost of winning new customers |

## Breach notification deadlines

- GDPR / UK GDPR: notify the regulator within 72 hours of becoming aware of a reportable breach (Article 33).
- India DPDP Act 2023: inform the Data Protection Board and each affected person (Section 8(6)).
- US: notification laws vary by state; HIPAA covers health data.

## How to reduce breach cost

- Write and rehearse an incident response plan so the team acts within hours, not days.
- Encrypt personal data at rest and in transit, and manage keys properly.
- Enforce multi-factor authentication and least-privilege access.
- Collect less data and delete what you no longer need.
- Monitor logs centrally and alert on unusual access.

## FAQ

### How much does a data breach cost?

IBM’s 2026 Cost of a Data Breach Report puts the global average at a record USD 4.99 million, and USD 11.5 million in the US. Small businesses face smaller totals but a higher cost relative to their size.

### What is the cost per record of a data breach?

In IBM’s 2026 report, customer personal data cost USD 192 per record, employee personal data USD 188 and intellectual property USD 196.

### What reduces the cost of a data breach?

Detecting and containing it faster — the 2026 average was 247 days. IBM found extensive use of security AI and automation saved an average of USD 1.93 million; incident response plans, encryption and training also help.

### Is this calculator suitable for very large breaches?

Not precisely. IBM’s per-record figures come from breaches of about 2,600 to 115,000 records and IBM advises against scaling them to millions of records. Treat large results as an upper guide.

## Sources

- [IBM — Cost of a Data Breach Report 2026](https://www.ibm.com/reports/data-breach)

## Get expert help

Send these results to an Infikey Technologies specialist from the form on https://infikeytechnologies.com/tools/data-breach-cost-calculator#estimate or via https://infikeytechnologies.com/contact.

More free calculators: https://infikeytechnologies.com/tools.md

## Disclaimer

This calculator is provided free for general information and planning only. Results are estimates based on the inputs you enter and the assumptions described on this page, reference data such as published prices may change, and actual costs and outcomes will differ. Nothing on this page is financial, legal, tax, investment or other professional advice. Infikey Technologies Private Limited, Infikey Technologies LLC and their directors, employees and affiliates make no warranty, express or implied, about the accuracy, completeness or suitability of this tool or its results, and accept no liability for any loss or damage, direct or indirect, arising from its use or from reliance on its results. Verify all figures independently and seek professional advice before making any decision. Use of this tool is at your own risk.