UK firms face £3.2m bill for each data breach