Many UK firms are not insured against information security breaches and data loss, and would have to spend £1m on average to recover from a breach

https://www.computerweekly.com/news/252447970/Majority-of-UK-firms-not-insured-for-data-breaches