Companies also have to pay for the clean up after they're attacked -- and that cost often eclipses the value of the stolen information itself.
Each stolen document cost an average of $204 in 2009, $144 of which was not directly related to the data itself.