Cyber incidents cost less than often cited, report finds