In order to look at breach cost, cybersecurity, and breach identification a survey was conducted of various sized UK firms. The dependent variable was cybersecurity investment, the independent was breach cost, and the moderator was breach identification source. The data confirmed that firms learned from pervious problems, and breaches with higher financial costs was positively associated with an increase of cybersecurity investments.