Your business hit by a data breach? Expect a bill of $3.92 million