Data Loss Remediation Estimator
Determine your immediate financial exposure to a data exfiltration event, prior to any federal or state regulatory fines.
Incident Response Forecaster
Estimated Hard Costs
* Legal and forensic baseline costs are empirical averages for mid-sized accounting firms. They do not account for state-specific regulatory fines or FTC consent order compliance.
Common Mistakes in Response
Believing that paying a ransom prevents the need to notify clients. The exfiltration of data (the breach) triggers the notification requirement under state and federal law, regardless of whether the data was encrypted or the ransom was paid.
Frequently Asked Questions
Does this include IRS/FTC fines?
No. This model only calculates the immediate incident response and client notification/protection costs. Regulatory fines can easily double this figure, often reaching $50,120 per violation under the FTC Safeguards Rule.
Will our cyber insurance cover this?
Yes, assuming your firm accurately filled out the policy questionnaire. If you claimed to have MFA everywhere but were breached via an account without MFA, the claim may be denied for misrepresentation.