Estimate data breach expected financial loss using scenario-specific operational and financial assumptions. This calculator separates the main cost drivers, shows supporting results, and explains the formula so security, finance, and operations teams can compare scenarios consistently. Enter values from your own risk assessment, incident history, insurance terms, and response plans; the result is a planning estimate rather than a guarantee of incident frequency, recovery performance, coverage, or loss.
Annual expected loss is the net incident severity weighted by the probability of a modeled breach during one year.
This is not legal, insurance, or regulatory advice. Costs vary by record type, contracts, jurisdiction, response, and policy terms.
For 25,000 records at $95 each, $350,000 fixed cost, $180,000 interruption cost, 15% reimbursement, and 8% annual probability:
Record count scales the variable notification, support, investigation, and remediation cost entered per affected record.
Include them only when your scenario and jurisdiction support a reasonable estimate; otherwise model them separately or enter zero.
The modeled reimbursed share reduces incident loss before the annual breach probability is applied.
Yes. The probability field accepts decimals, so 0.5 represents a 0.5% annual chance.
No. It is your input and should reflect the records, response obligations, contracts, and costs relevant to the scenario.
| Input | Scope |
|---|---|
| Records affected | Modeled population requiring record-related work |
| Cost per record | User-entered variable response cost |
| Fixed costs | Legal, investigation, communications, and other fixed work |
| Probability | Annual likelihood applied to net incident loss |