Gross terms for Target: 61 Million in 2013 and 191 Million in 2014 from a loss of 40 Million cards. Simple mindeed math comes to losses of $6,30 per card breached. Even if we assume these costs roll out over time, this amounts $.35/Card/Month. Using similar proportions, Home Depot lost 58 Million cards, so I might guess its gross cash losses to be near 307 Million. If the time factor of costs were estimated, then 10 months since the Home Depot Breach might come to 203 Million in gross cash loseses. But, we reported gross cash loss of only 63 million for 10 months. So, either Home Depot has an amazing recipe for curbing losses from credit card breaches, or has chosen accounting methods that under report their losses by a potential factor of 230%. Either way, something amazing is happening at Home Depot. Here is hoping that amazing thing is powerfully excellent Information Security Operational Risk Management. My best hope here is that Home Depot simply has an excellent InfoSec team that is fully supported by management that was able to curb damage faster than Target did. Excellent practices in Cyber Risk prevention, detection and reaction really can make actual differences in outcomes by as much as a power of 10. My concern is that it is also possible to under report true losses by a power of 3 or 300% by using excusable alterations in accounting for the true nature of gross losses. Repairing breached servers is an ordinary IT cost, Fines go legal and compliance costs rather than breach losses, there are lots of ways to pair down the losses in the official number even if the loss is just as real and the true root cause of the cost was the Cyber breach.