A PCI violation can cost around $5000-$100000/per month which is roughly around 4800-80000 in GBP – even millions. In 2017, for example, British Airways was fined $229 million for a data breach that affected 500,000 customers.