Measuring the impact of multi-party security breaches