The silence holds across both feeds: a figure appears on 36 of 117 government-record incidents and 3 of 123 beyond the filings. Each is an approved primary record; a count of incidents, never a sum of dollars.
Enforcement and registry records (state-attorney-general notices, regulator actions, the HHS OCR breach portal) are not counted here: their money is a penalty or none at all, not an incident cost, so they are neither priced nor silent. 117 such records are set aside.
A missing figure is not a loss of zero. It means the cost is unknown, not yet disclosed, or never quantified. The absence is the finding: the public record of what cyber costs is mostly blank.
THE FLOOR · A count of incidents tracked to date, not a census of all breaches.