2016 Cost of Data Breach Study: Global Analysis

IBM and Ponemon Institute

According to our research, the average total cost of a data breach for the 383
companies participating in this research increased from $3.79 to $4 million.

The average cost paid for each lost or stolen record containing sensitive and confidential information increased from $154 in 2015 to $158 in this year’s study. In addition to cost data, our global study looks at the likelihood of a company having one or more data breach occurrences in the next 24 months. We estimate a 26 percent probability of a material data breach involving 10,000 lost or stolen records.

According to this year’s findings, organizations in Brazil and South Africa are most likely to have a material data breach involving 10,000 or more records. In
contrast, organizations in Germany and Australia are least likely to experience a material data breach. In this year’s study, 383 companies located in the following 12 countries participated:

Dollar Signs around the Globe

United States, United Kingdom, Germany, Australia, France, Brazil, Japan, Italy, India, the Arabian region (United Arab Emirates and Saudi Arabia), Canada and, for the first time, South Africa. All participating organizations experienced a data breach ranging from approximately 3,000 to slightly more than 101,500 compromised records. We define a compromised record as one that identifies the individual whose information has been lost or stolen in a data breach.

Data breaches cost the most in the US and Germany and the lowest in Brazil and India. The average per capita cost of data breach was $221 in the US and $213 in Germany. The lowest cost was in Brazil ($100) and India ($61). The average total organizational cost in the US was $7.01 million and in Germany $5.01 million. The lowest organizational cost was in India ($1.6 million) and South Africa ($1.87 million).

Each Industry is Different

The cost of data breach varies by industry. The average global cost of data breach per lost or stolen record was $158. However, healthcare organizations had an average cost of $355 and in education the average cost was $246. Transportation ($129), research ($112) and public sector ($80) had the lowest average cost per lost or stolen record.

To learn more download our factsheet.