Rex says
Money math without the spreadsheet headache. Plug in your numbers and I'll show you exactly where the dollars land.
Try a scenario
Click to load — tweak from there.Inputs
Result
Estimated total breach cost
$8,500,000
Variable cost (records × adjusted rate)
$8,250,000
Adjusted cost per record
$165.00
All-in cost per record (incl. fixed)
$170.00
Fixed costs applied
$250,000
Psst — share this and help Rex grow
One click, a permanent link with your numbers baked in.
How to use this
- 1Enter records exposed.
- 2Enter base cost per record.
- 3Enter industry.
- 4Enter days to identify and contain.
- 5Enter fixed costs (legal, forensics, notification).
- 6Read your estimated total breach cost on the right — it updates as you type.
- 7Hit Share to keep the scenario or send it to someone.
About this calculator
The IBM Cost of a Data Breach report puts the global average cost per compromised record around $165-$180, but that average hides massive variance by industry, region, and how fast the breach was contained. Healthcare and finance run 1.5-2x the global average because of regulatory fines and remediation complexity; breaches contained under 200 days cost noticeably less than long-dwell incidents. This calculator applies an industry multiplier and a containment-speed adjustment to the per-record baseline, then adds fixed costs like legal fees, forensics, and customer notification that don't scale linearly with record count. Use it for board-level 'what if' conversations and cyber insurance coverage sizing, not as an exact prediction, since actual costs depend heavily on data type (PII vs. payment card vs. health records), applicable state notification laws, and whether litigation follows.
Worked example
Using the values the calculator loads with:
Inputs
- Records exposed: 50000
- Base cost per record: 165
- Industry: Retail / general
- Days to identify and contain: 200
- Fixed costs (legal, forensics, notification): 250000
Results
- Estimated total breach cost: $8,500,000
- Variable cost (records × adjusted rate): $8,250,000
- Adjusted cost per record: $165.00
- All-in cost per record (incl. fixed): $170.00
- Fixed costs applied: $250,000
What each field means
Inputs
- Records exposed
- The records exposed used in the calculation. Starts at 50000 so you have a working example on load.
- Base cost per record
- The base cost per record used in the calculation. Starts at 165 so you have a working example on load.
- Industry
- Pick the option that matches your situation — the maths changes per option. Choices: Healthcare, Financial services, Technology / SaaS, Retail / general, Public sector.
- Days to identify and contain
- The days to identify and contain used in the calculation. Starts at 200 so you have a working example on load. Accepted range: 1–500.
- Fixed costs (legal, forensics, notification)
- The fixed costs (legal, forensics, notification) used in the calculation. Starts at 250000 so you have a working example on load.
Results
- Estimated total breach cost
- Returned as a money amount in US dollars and shown as the headline result. It recalculates instantly whenever you change an input, so you can compare scenarios without reloading.
- Variable cost (records × adjusted rate)
- Returned as a money amount in US dollars. It recalculates instantly whenever you change an input, so you can compare scenarios without reloading.
- Adjusted cost per record
- Returned as a money amount in US dollars. It recalculates instantly whenever you change an input, so you can compare scenarios without reloading.
- All-in cost per record (incl. fixed)
- Returned as a money amount in US dollars. It recalculates instantly whenever you change an input, so you can compare scenarios without reloading.
- Fixed costs applied
- Returned as a money amount in US dollars. It recalculates instantly whenever you change an input, so you can compare scenarios without reloading.
FAQ
Why does days-to-contain matter so much?
Long-dwell breaches let attackers move laterally, exfiltrate more data types, and often trigger multiple regulatory disclosures instead of one. IBM's research consistently shows breaches contained past 200 days cost 25-35% more than those caught earlier, which is the strongest argument for investing in detection over pure prevention.
Does this include regulatory fines like GDPR or HIPAA penalties?
Only partially, through the fixed-cost input. GDPR fines can reach 4% of global revenue and HIPAA penalties scale by violation tier, both of which are case-specific and should be added separately if you're in a regulated industry with a known exposure history.
Why is healthcare so much more expensive per record?
Health records can't be reissued like a credit card number, they carry lifetime value on black markets, and HIPAA breach notification plus OCR investigation costs stack on top of standard forensics and legal fees. That combination consistently makes healthcare the most expensive sector per record in every major breach cost study.
Should I use this number to size cyber insurance?
It's a reasonable starting point for a coverage conversation, but insurers will want your own loss history, security control maturity (MFA, EDR, backup testing), and a formal risk assessment. Treat this calculator's output as the low end of what a serious breach could cost, not the ceiling.
Accuracy and limitations
- Results are estimates before tax, fees, and inflation unless an input explicitly covers them.
- Rates are treated as fixed for the whole period — variable-rate products will drift from this projection.
- This is educational maths, not financial advice. Check anything contractual with the lender or your accountant.
Related tools
Annualized Loss Expectancy (ALE) Calculator
Turn asset value, exposure, and threat frequency into a yearly risk dollar figure.
MTTD/MTTR Cost Impact Calculator
See how faster detection and response times translate into dollars saved.
Vendor Risk Exposure Calculator
Score and dollar-weight vendor risk from data access, criticality, and control maturity.
Cite this calculator
Writing about this topic? Grab a citation — every link helps keep these tools free.
RevenueLab. (2026). Data Breach Cost Calculator. Retrieved from https://www.revenuelab.fyi/toolbox/breach-cost-per-record
<p>Source: <a href="https://www.revenuelab.fyi/toolbox/breach-cost-per-record" target="_blank" rel="noopener">Data Breach Cost Calculator — RevenueLab</a> (2026).</p>
Source: [Data Breach Cost Calculator — RevenueLab](https://www.revenuelab.fyi/toolbox/breach-cost-per-record) (2026).