Are businesses cybersecurity measures reactive or preemptive?

Hi! This is my first post I am in development of my data sharing and storage platform without exposing consumer underlying information. Data breaches aren't going anywhere and for most businesses the cost of one can put them out of business or lose consumer trust. I believe I have the solution but my question to business owners in healthcare, retail, e-commerce (Any other businesses that stores consumer sensitive data) is would you be willing to try a new way? Are you just hoping you don't fall victim? What are your current pain points? I have a small beta test of healthcare practices, but I want more use cases to test and continue to iterate. Hopefully with the community I build here! If you have fallen victim to a data breach how did that effect you?