[gmisra]

Is anyone aware of an entity that attempts to objectively quantify the economic impact of an event like this (ransoms paid, data lost, labor hours lost, new security costs, etc)?

[d33]

I wouldn't say new security is a cost - unless it's fake security, like antiviruses.