IBM put the average breach at $4.99 million. In January the CNIL fined one French carrier €42 million, and part of the finding was that it kept data it had no business still having. Turns out "storing everything" has a cost that goes beyond hard drives.