Key findings from 2009 Ponemon Institute Annual Study
- Data breach incidents cost U.S. companies an average of $204 per compromised customer record in 2009.
- The average total per-incident costs in 2009 were $6.75 million.
- A total of 498 breaches were reported in 2009 according to the Identity Theft Resource Center.
- Engaging a consultant or third party expert to assist in the data breach incidence results in lower average cost per compromised record (almost 26% lesser).
- About 44% of participating companies engaged an outside consultant to assist them over the course of the data breach incident.
- Organizations in highly trusted industries such as financial services and health care are more likely to experience a data breach with higher abnormal churn rate (5% and 6% respectively).
Key findings from 2009 Research Report compiled by Javelin Strategy & Research:
- For the past three years, about 11% of U.S. consumers received a breach notification in the past 12 months.
- As of October 2009, 45 states have specific data breach notification laws.
- Slightly more than one third of breach victims experienced the theft of their Social Security numbers, and about 15% had compromised ATM PINs.
- Breach victims experienced a fourfold higher rate of fraud victimization over the past year than the typical consumer (19.5% vs. 4.32%).
- More than 130 million records from the Banking\Credit\Financial sector were exposed in the first nine months of 2009.