Cyber Incidents Cost More Than You Might Think
As technology advances, companies are collecting, storing and transferring more personal information about their customers and employees than ever before. This not only opens organizations up to a cyber attack, but it also means that just one breach can affect thousands or even millions of individuals. And, unfortunately for organizations, cyber incidents cost more than just data:
- Data breaches are becoming increasingly expensive. While cyber liability insurance can help offset the costs of a data breach and any subsequent litigation, just one breach can be financially devastating. According to a survey conducted by the Ponemon Institute, the average cost of a data breach was $5.78 million, or $255 per lost or stolen record.
- Regulatory costs can be significant. With the advent of Canada’s Digital Privacy Act (DPA), which amends the Personal Information Protection and Electronic Documents Act (PIPEDA), failing to handle a data breach properly can result in major fines. As part of PIPEDA, companies must comply with mandatory data breach notification and reporting requirements. Failing to do so can result in fines of $100,000 per violation.
- Cyber incidents can lead to serious reputational damage, significantly impacting directors and officers. Reputational damages can easily reach six figures. According to Kaspersky Lab, a global cyber security company, a single cyber incident recently caused brand damage of $8,000 for small and medium-sized businesses and $200,000 for larger organizations. When wide-scale breaches occur, a company’s reputation can be tarnished, sometimes permanently. In addition, the public holds organizations accountable for major losses of personal data, and directors and officers are often the ones who take the blame.