Data Breach Services

Whether a data breach is suspected or validated, whether it occurred at the hand of an employee, a thief, or by simple human error, Kroll’s expert knowledge and depth of experience enables us to provide clients with integrated investigative and fact-finding services to assess and contain a data breach or loss.

We combine traditional and high-tech investigative techniques to help clients identify and track data and bridge the gap between the online and physical worlds to verify the source of the data breach and confirm whether PII has been compromised.

In its 2010 annual study of data breach costs, the Ponemon Institute found the average organizational cost of a data breach to be $6.75 million in 2009. The same study reveals that higher expectations of trust and privacy equate to higher cost in terms of lost customers: a 3.7% average churn rate (loss of those individuals directly affected) rises to 5% for financial services and 6% for healthcare.

Kroll’s computer forensic engineers and information security specialists accurately pinpoint the type and sensitivity of the data lost, then validate the extent of exposure, establishing the finite universe of affected individuals.

A defensibly-determined scope is key to risk reduction both in terms of legal, regulatory and reputational exposure, as well as in direct cost for notification and consumer support that may be required.

Through address standardization derived during scope definition, Kroll’s validation results in properly-formatted contact information. Without any additional effort, the client is prepared for third-party and individual data breach notification where necessary.

Identity management specialists assemble a remedy specific to the data lost and the individuals affected. Communication and compliance specialists craft notification materials; established processes are in place to distribute announcements and notices according to the client’s schedule.

Our multilingual call center staff of full-time employees is in place to answer incoming questions. Kroll’s licensed investigators consult with those who believe the data breach has identity theft implications, and help victims restore their identities to pre-theft status as quickly and efficiently as possible.

By ensuring that every person affected by the data breach receives appropriate information and the means to talk with experts about the event, the client transforms organizational accountability into consumer best practices.

Kroll conducts all activities with an unrivaled awareness about chain of custody, document preservation hold requirements, and evidentiary defense.

We document our findings and develop information with an eye toward admissibility in legal proceedings. We collaborate with the client’s designated general counsel, senior executives, and audit committees at each stage of the data breach continuum to assure that objectives are met.

Whether testifying at trial or delivering a case file for regulators or law enforcement, Kroll identifies, investigates, and closes gaps that might otherwise foster repeated risk and loss.