$1.7M is the Average Cost of a Cyber-Attack January 15, 2019 https://threatpost.com/threatlist-cost-cyber-attack/140870/
OK, language quibble. $1.7 million may be the average impact of cyber attacks. But the average cost is probably more like $1.7 thousand. Or maybe less. Attacks by states, mafias, etc obviously cost a lot more. But arguably it's individuals and small groups that do most attacks. And I've see rent-a-hacker prices in the $hundreds to $thousands range.
Cost per Cyberattack Jumps to $4.6M in 2019 June 19, 2019 https://www.darkreading.com/perimeter/cost-per-cyberattack-jumps-to-$46m-in-2019/d/d-id/1335008
Disruption: The True Cost of an Industrial Cyber Security Incident August 26, 2019 https://www.tripwire.com/state-of-s...ost-of-an-industrial-cyber-security-incident/