Calculated risk: Measuring your data’s vulnerability to breaches