Adding Up the Costs of Data Breaches