Has anyone ever done an analysis of what impact these kinds of breaches (like OneLogin for example) have on either end users or the company? Ie, we often descr

Has anyone ever done an analysis of what impact these kinds of breaches (like OneLogin for example) have on either end users or the company? Ie, we often describe breaches as "really bad" but it would be good to quantify in terms of things like: - Revenue Lost (Company) - Reputation Lost (Company) - Time Lost (Company + User) - Increased Costs and Penalties (Company) - Assets lost (Company + User)