Across all data types, the range of claim payouts was enormous, from a low of $2,560 up to $20 million.
Surprisingly however, the median payout -- regardless of data type -- fell within a relatively narrow range, between $207,000 and $317,000, NetDiligence said.
There were two large claims for incidents in which more than 100 million records were exposed. For this reason, personally identifiable information accounted for more than 95 percent of the records exposed, NetDiligence said. Personal health information accounted for only 2.48 percent of records exposed.