The cost to who?
"Information security breaches cost anywhere between $90 to $305 per lost record"
I wonder what the cost to the CUSTOMER is when this happens... but I can guess the likely range is from "nil" to "life altering".
"TJX costs would only exceed $1bn if widespread incidents of identity theft associated with the breach forced the retail giant to slash costs and mount a costly marketing drive in a bid to woo punters back into stores."
Isn't it comforting to know that nowhere in that plan is the compensation of hypothetical victims of corporate blundering?