Breach registers count individuals. Cost surveys estimate dollars. Nothing counts jobs.
Forty people at one supplier is the number that describes what the £1.9 billion is made of.
Resilience is a wasting asset in cash as well as in process, and nobody tracks the financial half.
No records exposed, no notification owed, nothing in any register. What happened is that people stopped being paid.