A vulnerability in the fielded device is exploited (or discovered), forcing a field safety corrective action: sale and use are suspended while a patch is developed and rolled out. Unlike a factory-side halt, trust does not automatically snap back — a permanent reputational demand haircut follows. This tool computes the revenue lost against the no-attack baseline, split into the stop-sale loss and the lasting reputational loss.

Weeks are whole numbers. Use a comma or a period for decimals; do not use thousands separators.

This produces a model-based estimate for discussion — not financial advice.