Costs for ransomware include direct lost business, ransomware payments, recovery expenses, investigation and future mitigation, fines from regulators and class action lawsuits. In 2023, this added up to an average total of $5.13 million, compared with $4.45 million for data breaches as a whole.