Seems way too early to tell whether it will be good or bad on balance. These breaches are annoying, but not catastrophic, and in the meantime you can secure software.
How do you even want to calculate costs. Should you be even calculating costs when real damage is also a lot of misery, some heart attacks and 50k people lose 1 year of their life due to massive stress for example.
... in fantasy land.