Forrester Research surveyed 28 companies that had some type of data breach and found it difficult to calculate the expenses that resulted.