According to IBM’s Data Breach Action Guide

Organizations who had experienced
more than 1 data breach:

Average number of days to identify and contain a cybersecurity breach