{ "name": "penetrationtestingcost.co.uk Breach Cost Benchmark", "title": "Breach Cost Benchmark", "url": "https://penetrationtestingcost.co.uk/datasets/breach-cost-benchmark/", "csv": "https://penetrationtestingcost.co.uk/datasets/breach-cost-benchmark.csv", "markdown": "https://penetrationtestingcost.co.uk/datasets/breach-cost-benchmark/index.md", "computed_at": "2026-11-13", "license": "https://penetrationtestingcost.co.uk/terms", "headline": "The median published figure in the Breach Cost Benchmark is 575 GBP across 9 figures from 4 sources' own pages (range 250 to 675 GBP), read 11 November 2026.", "quotes": [ "The median published figure in the Breach Cost Benchmark is 575 GBP across 9 figures from 4 sources' own pages (range 250 to 675 GBP), read 11 November 2026.", "4 of the 8 named sources read in full publish a figure; 4 publish none, read 11 November 2026.", "Breach Cost Benchmark, measure breach-cost: median 250 GBP across 1 source, read 11 November 2026.", "Breach Cost Benchmark, measure contract-day-rate: median 494 GBP across 2 sources, read 11 November 2026.", "Breach Cost Benchmark, time 2026-11: median 632.50 GBP across 2 sources, read 11 November 2026.", "Breach Cost Benchmark, time 6 months to 11 Nov 2026: median 590 GBP across 1 source, read 11 November 2026.", "The median is up 79 GBP since 22 October 2026 (was 496 GBP across 6)." ], "citation": "\"penetrationtestingcost.co.uk Breach Cost Benchmark\", updated 2026-11-13, https://penetrationtestingcost.co.uk/datasets/breach-cost-benchmark/.", "changed_since": { "since": "2026-10-22", "previous_median": 496, "delta": 79, "direction": "up", "sentence": "The median is up 79 GBP since 22 October 2026 (was 496 GBP across 6)." }, "national": { "unit": "GBP", "n": 9, "median": 575, "min": 250, "max": 675, "p25": 465, "p75": 632.5, "mean": 534.4444, "units": { "GBP": 9 }, "published_sources": 4, "named_sources": 8, "read_sources": 8, "not_published": 4, "published_share": 0.5 }, "by_axis": { "measure": { "breach-cost": { "GBP": { "n": 1, "median": 250, "min": 250, "max": 250, "p25": 250, "p75": 250, "mean": 250 } }, "contract-day-rate": { "GBP": { "n": 2, "median": 494, "min": 463, "max": 525, "p25": null, "p75": null, "mean": 494 } } }, "time": { "2026-11": { "GBP": { "n": 2, "median": 632.5, "min": 590, "max": 675, "p25": null, "p75": null, "mean": 632.5 } }, "6 months to 11 Nov 2026": { "GBP": { "n": 1, "median": 590, "min": 590, "max": 590, "p25": 590, "p75": 590, "mean": 590 } } } }, "rows": [ { "source": "Cyber security breaches survey 2025/2026 - GOV.UK", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "£0 ", "value": 0, "unit": "GBP", "vat": null, "axis": { "measure": "breach-cost" }, "retrieved_at": "2026-11-11", "quote": "The median perceived cost of the most disruptive breach or attack was £0 for businesses and £0 for charities, increasing to £30 for medium and large businesses. The range of perceived cost where most fell (25th to 75th percentile) was £0 to £200 for businesses and £0 to £80 for charities, suggesting that the majority of businesses did not experience high costs for their most disruptive breach or a", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "Cyber security breaches survey 2025/2026 - GOV.UK", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "£250, ", "value": 250, "unit": "GBP", "vat": null, "axis": { "measure": "breach-cost" }, "retrieved_at": "2026-11-11", "quote": "The median perceived cost of cyber crime other than phishing was £250, including those giving a cost of £0, and £750 excluding those giving a cost of £0. The range where most perceived costs fell (25th to 75th percentile) was £0 to £3,000 including £0 costs and £250 to £5,000, excluding £0 costs.", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "Cyber security breaches survey 2025/2026 - GOV.UK", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "figure": "£500, ", "value": 500, "unit": "GBP", "vat": null, "axis": { "measure": "breach-cost" }, "retrieved_at": "2026-11-11", "quote": "Among those who had a cost associated with cyber-facilitated fraud, the median perceived cost was £500, with the range of perceived cost where most fell (25th to 75th percentile) ranging from £150 to £5,000.", "source_class": "primary-government", "text_sha256": "e72a8ce74c6f815f9aa8153a80ea343fb7b1c293322afcc6ee597517db3bdd8a" }, { "source": "Penetration Tester Contract Job Trends, Contractor Rates & Skill Sets in Wales | IT Jobs Watch", "url": "https://www.itjobswatch.co.uk/contracts/wales/penetration%20tester.do", "figure": "£525 ", "value": 525, "unit": "GBP", "vat": null, "axis": { "measure": "contract-day-rate" }, "retrieved_at": "2026-11-11", "quote": "UK median daily rate £525 £500 £525", "source_class": "first-party-index", "text_sha256": "f68ff0a5217e2d1abec9308d3cf14bdb26d786674c5303f6c8775903a59820b5" }, { "source": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills in Scotland | IT Job", "url": "https://www.itjobswatch.co.uk/contracts/scotland/penetration%20testing.do", "figure": "£463 ", "value": 463, "unit": "GBP", "vat": null, "axis": { "measure": "contract-day-rate" }, "retrieved_at": "2026-11-11", "quote": "Median daily rate (50th Percentile) £463 £465 £450", "source_class": "first-party-index", "text_sha256": "b1e77eedbfd3014ee9b72587f6451741c2ee20cc2abe4b0d0f8b58778e196951" }, { "source": "Penetration Tester Contract Job Trends, Contractor Rates & Skill Sets in Wales | IT Jobs Watch", "url": "https://www.itjobswatch.co.uk/contracts/wales/penetration%20tester.do", "figure": "£675 ", "value": 675, "unit": "GBP", "vat": null, "axis": {}, "retrieved_at": "2026-11-11", "quote": "UK median daily rate £675 £550 £575", "source_class": "first-party-index", "text_sha256": "f68ff0a5217e2d1abec9308d3cf14bdb26d786674c5303f6c8775903a59820b5" }, { "source": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills in Scotland | IT Job", "url": "https://www.itjobswatch.co.uk/contracts/scotland/penetration%20testing.do", "figure": "£467 ", "value": 467, "unit": "GBP", "vat": null, "axis": {}, "retrieved_at": "2026-11-11", "quote": "Median daily rate (50th Percentile) £467 £469 £450", "source_class": "first-party-index", "text_sha256": "b1e77eedbfd3014ee9b72587f6451741c2ee20cc2abe4b0d0f8b58778e196951" }, { "source": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills | IT Jobs Watch", "url": "https://www.itjobswatch.co.uk/contracts/uk/penetration%20testing.do", "figure": "£575 ", "value": 575, "unit": "GBP", "vat": null, "axis": {}, "retrieved_at": "2026-11-11", "quote": "Median daily rate (50th Percentile) £575 £550 £569", "source_class": "first-party-index", "text_sha256": "c4be8b14b20378f1d5f0c2580e6b9083d0af1b7b6a7d6e106d0bb4439fdaad10" }, { "source": "Penetration Tester Contract Job Trends, Contractor Rates & Skill Sets in Wales | IT Jobs Watch", "url": "https://www.itjobswatch.co.uk/contracts/wales/penetration%20tester.do", "figure": "£675 ", "value": 675, "unit": "GBP", "vat": null, "axis": { "time": "2026-11" }, "retrieved_at": "2026-11-11", "quote": "UK median daily rate £675 £550 £575 % change year-on-year +22.73% -4.35% +9.52%", "source_class": "first-party-index", "text_sha256": "f68ff0a5217e2d1abec9308d3cf14bdb26d786674c5303f6c8775903a59820b5" }, { "source": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills | IT Jobs Watch", "url": "https://www.itjobswatch.co.uk/contracts/uk/penetration%20testing.do", "figure": "£590 ", "value": 590, "unit": "GBP", "vat": null, "axis": { "time": "2026-11" }, "retrieved_at": "2026-11-11", "quote": "Median daily rate (50th Percentile) £590 £550 £580", "source_class": "first-party-index", "text_sha256": "c4be8b14b20378f1d5f0c2580e6b9083d0af1b7b6a7d6e106d0bb4439fdaad10" }, { "source": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills | IT Jobs Watch", "url": "https://www.itjobswatch.co.uk/contracts/uk/penetration%20testing.do", "figure": "£590 ", "value": 590, "unit": "GBP", "vat": null, "axis": { "time": "6 months to 11 Nov 2026" }, "retrieved_at": "2026-11-11", "quote": "tile £500 £452 £510 Median daily rate (50th Percentile) £590 £550 £580 Median % change year-on-year +7.27% -5.17% +5.45% 75th Percentile £688 £600 £688 90th Percentile £775 £675 £765 UK excluding London median daily rate £575 £475 £525 % change year-on-year +21.05% -9.52% -4.55% Number of hourly rates quoted 10 0 0 10th Percentile £85.65 - - 25th Percentile £86.75 - - Median hourly rate £90.00 - -", "source_class": "first-party-index", "text_sha256": "c4be8b14b20378f1d5f0c2580e6b9083d0af1b7b6a7d6e106d0bb4439fdaad10" } ], "not_published": [ { "source": "Crime in England and Wales - Office for National Statistics", "url": "https://www.ons.gov.uk/peoplepopulationandcommunity/crimeandjustice/bulletins/crimeinenglandandwales/latest", "retrieved_at": "2026-11-10", "reason": "read in full and no accepted figure on the page" }, { "source": "Cyber Security Breaches Survey - GOV.UK", "url": "https://www.gov.uk/government/collections/cyber-security-breaches-survey", "retrieved_at": "2026-11-11", "reason": "read in full and no accepted figure on the page" }, { "source": "Cyber security breaches survey 2025/2026: technical report - GOV.UK", "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026-technical-report", "retrieved_at": "2026-09-12", "reason": "every candidate on the page was refused" }, { "source": "Enforcement action | ICO", "url": "https://ico.org.uk/action-weve-taken/enforcement/", "retrieved_at": "2026-10-31", "reason": "read in full and no accepted figure on the page" } ], "sources": [ { "url": "https://www.ons.gov.uk/peoplepopulationandcommunity/crimeandjustice/bulletins/crimeinenglandandwales/latest", "label": "Crime in England and Wales - Office for National Statistics", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/collections/cyber-security-breaches-survey", "label": "Cyber Security Breaches Survey - GOV.UK", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026", "label": "Cyber security breaches survey 2025/2026 - GOV.UK", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.gov.uk/government/statistics/cyber-security-breaches-survey-20252026/cyber-security-breaches-survey-20252026-technical-report", "label": "Cyber security breaches survey 2025/2026: technical report - GOV.UK", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://ico.org.uk/action-weve-taken/enforcement/", "label": "Enforcement action | ICO", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.itjobswatch.co.uk/contracts/wales/penetration%20tester.do", "label": "Penetration Tester Contract Job Trends, Contractor Rates & Skill Sets in Wales | IT Jobs Watch", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.itjobswatch.co.uk/contracts/scotland/penetration%20testing.do", "label": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills in Scotland | IT Job", "license": "the publisher's own terms; quoted for reporting and comment" }, { "url": "https://www.itjobswatch.co.uk/contracts/uk/penetration%20testing.do", "label": "Penetration Testing Contract Job Trends, Contractor Rates & Related Skills | IT Jobs Watch", "license": "the publisher's own terms; quoted for reporting and comment" } ], "methodology": "Every row is a verbatim sentence read from the named source's own page through our fetch service on the date shown, hash-pinned to the stored read (the sha of the page's visible text; the raw page is mirrored to R2). 4 of the 8 named sources that could be read published a usable figure; 4 published none and are recorded as not published, never filled in; 0 could not be read (blocked, dead or unreachable) and count nowhere. The headline figures (median, minimum, maximum, quartiles) are over ONE figure per source for each breakdown it prices, in GBP (a source's median where its page yielded several accepted sentences for one breakdown), so a page that gives figures for several breakdowns gives one for each and N counts 9 figures, never sentences; 154 candidate sentence(s) were refused by a reviewer with the reason recorded. The fuller derivation this dataset is chartered to grow into (not yet what the figures above are; they are each source's own published figure as read): the official UK figures the price has to stand next to: the mean and median cost of the most disruptive breach by organisation size from the Cyber Security Breaches Survey, the share of organisations breached, the ICO's own enforcement register of fines, and the day rate a tester commands in the contract market. The derivation is the ratio nobody publishes - the median published price of each test type against the mean breach cost for an organisation of that size, per year, so the cost question is answered with a number rather than an adjective.", "embed": "

575 GBP

median published figure, Breach Cost Benchmark, across 4 sources, read 11 November 2026

Source: penetrationtestingcost.co.uk Breach Cost Benchmark
" }