The average cost of a breach beyond fines is $408 for each patient chart lost. That cost is made up of required notifications and includes identity monitoring for two years to each affected patient. Some statistics indicate that clinics publically known to have suffered a loss of patient information will see a 40-70% reduction in returning and new patients.