Budgeting for data protection is difficult to get right. Overspending on staff and resources to protect data will result in a loss of money, and underspending on infrastructure to protect data will also result in a loss of money. In order to attempt to find the perfect equilibrium on how much to spend protecting from data breaches, the proposal outlines a study conducted on 30 retail companies that have been on the stock market for over 20 years. Analysis of both stock data and data recorded on information technology and cybersecurity budget aims to find a correlation between the two variables, whether higher or lower spending yields better results.