More than a quarter of executives reported that their most damaging data breach in the past three years cost their organisation at least $1 million.