The costs can be significant and include tens of thousands of dollars in lost revenue and gross margin per day, damage to company reputation, wasted labor costs, potential ransom payments which can reach hundreds of thousands of dollars, and costs for investigations, legal fees, and possible PCI fines.