The costs associated with PCI non-compliance can be devastating: 60% of small businesses will go under within six months of a data breach. The average cost to a business after a data breach is $200,000. This number includes the costs for: Forensic investigation into the data breach. Fines and penalties from the payment processor and financial institution, which can vary depending on the business’ size and the scope and duration of the non-compliance. (Fines can vary from $5,000 to $100,00 per month.)