The Most Expensive Data Breaches

A new study from Surfshark applies IBM's "Cost of a Data Breach" calculations to the largest data breaches in recent history in order to find the estimated cost of today's biggest data breaches.

What they found is that the Dark Web is currently the place to buy stolen data.

When hackers lifted 162 million personal records from Dubsmash in 2019, the databases soon showed up for sale for $1,976 in Bitcoin. The most likely buyers were phishers and spammers.

But like many thefts, the resale value is only small  in comparison to the costs incurred by the victims. A hacker just needs to know your email address and that you’re a customer of, say, a bank or financial services to begin impersonating your identity.

  • The biggest data breach of the past two years was the Advanced Info Service (AIS) hack, which may have cost $58m million to resolve.
  • America’s biggest data breach of the 2020s so far was at ‘big data’ analysis firm BlueKai, where two billion records were exposed at a potential cost of $13.94bn.
  • The Microsoft leak in December 2019 may have cost as much as $1,742,500,000 to rectify.

According to IBM, businesses face four substantial bills in the aftermath of a data hack:

  • Detection and escalation: Including investigations and crisis management.
  • Notification: Communicating with customers, regulators, and lawyers.
  • Lost business: Downtime, dropped stock prices, lost customers, and damaged reputation.
  • Post-breach response: Restoring and improving security, legal expenses, fines, and compensation.

Surfshark

You Might Also Read: 

Cybercrime’s Deadly Impact On Business:

 

« UK Warns Of Russian Cyber Attacks
Digital Advertising Fraud Will Cost $68 Billion »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

North Infosec Testing (North IT)

North Infosec Testing (North IT)

North IT (North Infosec Testing) are an award-winning provider of web, software, and application penetration testing.

ZenGRC

ZenGRC

ZenGRC - the first, easy-to-use, enterprise-grade information security solution for compliance and risk management - offers businesses efficient control tracking, testing, and enforcement.

ManageEngine

ManageEngine

As the IT management division of Zoho Corporation, ManageEngine prioritizes flexible solutions that work for all businesses, regardless of size or budget.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

Seclore

Seclore

Seclore is the most advanced, secure, and automated Enterprise Digital Rights Management (EDRM) solution available.

SiteLock

SiteLock

SiteLock is a global leader in website security solutions. We provide affordable, cybersecurity software solutions designed to allow small to midsize businesses to operate without fear of an attack.

Exabeam

Exabeam

Exabeam is a global cybersecurity leader that delivers AI-driven security operations.

TechVets

TechVets

TechVets is a non-for-profit helping UK veterans and service leavers retrain into Cyber Security and Technology jobs.

Information System Security Directorate (ISSD) - Afghanistan

Information System Security Directorate (ISSD) - Afghanistan

Information System Security Directorate (ISSD) is the Directorate of MCIT responsible for the security of critical information infrastructures in Afghanistan.

ICT Reverse

ICT Reverse

ICT Reverse is one of the UK’s leading, fully accredited providers of ICT asset disposal and secure data erasure.

Electric Power Research Institute (EPRI)

Electric Power Research Institute (EPRI)

The Electric Power Research Institute’s Cyber Security Research Laboratory (CSRL) addresses the security issues of critical functions of electric utilities.

BicDroid

BicDroid

BicDroid is a world leader in data and cyber security with innovative solutions that protect your data anywhere, anytime, against everything.

Inflection Point Ventures (IPV)

Inflection Point Ventures (IPV)

Inflection Point Ventures (IPV) is a 6000+ members angel investing firm which supports new-age entrepreneurs by connecting them with a diverse group of investors.

Sababa Security

Sababa Security

Sababa Security is the first Italian innovation cyber security vendor, that provides security products, training, and managed services to protect diverse IT and OT environments.

Digital Security Authority (DSA)

Digital Security Authority (DSA)

The establishment of the Digital Security Authority, which incorporates the National CSIRT, is crucial to significantly raising the cybersecurity posture and capabilities of Cyprus.

InfoSecTrain

InfoSecTrain

InfoSecTrain are a leading training and consulting organization dedicated to providing top-tier IT security training and information security services to organizations and individuals across the globe

Kontra

Kontra

Kontra application security training is an interactive and intuitive learning experience that engages developers.

Cloudbrink

Cloudbrink

Cloudbrink is purpose-built to deliver the industry’s highest performance connectivity to remote and hybrid workers, anywhere in the world.

Sage IT

Sage IT

Sage IT offer a wide range of professional and consulting services to help organizations overcome the challenges of today's ever-changing business environment.

Complete Cyber

Complete Cyber

Complete Cyber provide professional cybersecurity services and products to help secure your infrastructure, systems and data.