Data Breach Preparation: Failing to Plan is Like Planning to Fail

by Michael Bruemmer 4 min read September 14, 2021

As today’s fastest-growing form of criminal activity, cybercrime is expected to cost organizations $6.1 trillion worldwide this year alone,1 with attacks on enterprises now occurring every 11 seconds2. But despite increasingly widespread growth in corporate IT security awareness, the importance of putting a sound data breach preparation plan in place for protecting your customers’ privacy and data can’t be underscored enough.

Given the scale of IT security threats, it bears reminding: Network compromise is now largely a matter ofwhen, notiffor most businesses. As a result of this shift in security and operating environments, it’s important for enterprise leaders to note thesix key reasons that most data breach responses fail:

  1. No Budget:Despite the seeming inevitability of a data breach, most companies’ average annual budget for a consumer response is exactly $0. Many companies and security teams believe they are fully prepared or won’t be targeted. But with losses due toransomware attacks up 225% lately in the US alone3, it can be an expensive gamble to make.
  2. Never Tested:Even if a company does have a data breach response plan in place, it’s not usually been stressed-tested via live exercises and drills. Having a plan in place is a great first step, but unless you test it in a live breach simulation or exercise, you can’t be certain the plan will be successful.
  3. Unknown Impact:It can be hard to know how much of your customer population has been impacted by the breach. Your plan needs to be flexible enough to accommodate both small and massive breaches.
  4. No Estimate:Data breach responses also fail because there is no estimate for the scale of phone calls, emails, and complaints that may be received. To put things in perspective: A small data breach is MUCH different and easier to remedy than a one involving millions of records.
  5. Slow to Respond:By law, firms that suffer a data breach must now report the incident to government authorities within 72 hours. Failure to address increasing regulatory compliance and information sharing needs (which demand greater oversight and overhead from organizations), can come with hefty fines.
  6. No SLAs:Companies often don’t have the necessary agreements to guarantee the infrastructure and staff to assist consumers with resolving their cases. Having a dedicated, guaranteed number of call center agents ready to go when a company experiences a data breach is invaluable.

To improve your odds of successfully defending against and responding to breaches, you’ll want to focus on strengthening four areas of operations:

  • Guarantee Resources:Ensure that you have dedicated security resources and prepared to react to threats on the turn of a dime. Your SLAs should include well-trained, certified call center agents and the infrastructure ready to go. This should include scalable and high quality identity protection services to resolve harm to your customers.
  • Readiness Testing:Failing to plan (i.e. not stress-testing your recovery plan prior to incidents occurring) is like planning to fail. By rehearsing your disaster response and recovery strategies, you’ll be able to identify any points of failure and shortcomings that you can improve upon before actual concerns arise.
  • Regulatory Needs: Emphasize quick and accurate responses to regulator inquiries by understanding the specifics for your industry and business.
  • Communications:Having a corporate communications plan ready to go in real-time is also key. Connect with your communications team to create a communications response plan prior to any incidents occurring so that all you largely need to tweak are specifics on the day of the event.

According to studies by IBM, companies can save $1.2 million off the cost of data breaches by having an incident response plan in place and extensively testing it before cyber threats strike. Bearing this in mind, the best defense against digital dangers is a good offense.Experian’s Reserved Response™was created to help organizations take a proactive approach to data breach response planning. Deploy it to put an end-to-end game plan in place and implement a step-by-step playbook that workers can follow in the event of an incident. You’ll also guarantee that your organization gains the necessary manpower, infrastructure, and response readiness needed to ensure ongoing network resilience and a speedy recovery should disaster strike.

1Cybersecurity Ventures, Annual Cybercrime Report 2020

2Cybersecurity Ventures, Cybercrime to Cost the World $10.5 Trillion Annually by 2025

3Cyberreason, Ransomware: The True Cost to Business Study 2021

Related Posts

Invisible Security Is the New Competitive Advantage at Checkout 

Every retailer invests heavily to drive shoppers to its website during the holidays. But after months of planning and thousands to millions of dollars spent on marketing, every customer journey comes down to one critical moment: Checkout.  Today, fraud prevention means protecting revenue by ensuring legitimate customers complete their purchase, not just stopping bad actors.  That's becoming increasingly important as holiday shopping evolves. In 2025, U.S. online holiday spending reached a record $257.8 billion,1 with shoppers spreading their purchases across months rather than just Black Friday and Cyber Monday. Every approval and every false decline has a bigger business impact than ever.  Trust is becoming a conversion strategy  Consumers expect retailers to protect them from fraud, but they don't want that protection to slow them down. That's where a significant opportunity exists.  Experian research found that 52% of consumers expect retailers to protect them online, yet only 19% trust them to do so.2 Meanwhile, payment providers enjoy a positive trust gap because security happens quietly in the background with minimal friction.   The takeaway? Customers don't equate more authentication with more trust. Instead, they equate less friction with better experiences.  Learn how retailers can improve approvals, reduce false declines and build customer trust through layered identity intelligence.  Download the white paper Invisible security is the future of checkout  Modern identity verification, behavioral analytics and account intelligence allow retailers to recognize trusted customers behind the scenes – reserving step-up authentication only for higher-risk transactions. Why does that matter? Because friction is measurable.  Research from Experian and cited in our white paper, shows that 16% of online transactions encounter suspected fraud friction, and 70% of that friction is unnecessary.3 Meanwhile, 25% of consumers abandon the purchase after experiencing onboarding friction, choosing a competitor instead.   Reducing unnecessary friction isn't just good customer experience; it's good business.  One retailer that used Experian's account ownership verification and identity intelligence captured more than $8 million in additional monthly revenue by improving auto-approval strategies and reducing customer friction.   Learn how to protect revenue, not just prevent fraud As holiday traffic ramps up, retailers have an opportunity to rethink checkout as more than a fraud control. It's a revenue engine. Our latest white paper explores how layered identity strategies can help retailers improve approvals, reduce false declines and deliver the frictionless experiences customers increasingly expect.  Download the full white paper to learn how invisible security can help strengthen customer trust while maximizing holiday conversion.  Download now

August 19, 2026 by Kim Le
Winning Top-of-Wallet Before the Holiday Season: What Lenders Should Know Now

Every year, consumers say they'll spend less during the holidays. Every year, many do the opposite. Ahead of the 2025 holiday shopping season, 57% of consumers told Deloitte they expected the economy to weaken, the most pessimistic outlook recorded in the survey's history. Planned holiday spending was down 10%. Yet by the end of the season, online holiday sales reached a record $257.8 billion, up 6.8% year over year. Credit card balances climbed to $1.28 trillion, and Buy Now, Pay Later (BNPL) financing surpassed $20 billion during the holiday period. For lenders, the takeaway is to identify and engage the right consumers before the holidays were best equipped to capture that spending while effectively managing risk. As the 2026 holiday season approaches, Experian's latest market insights suggest that while credit performance appears relatively stable at the portfolio level, important shifts beneath the surface are changing how lenders should evaluate both opportunity and risk. Holiday shopping season 2026 Winning top of wallet before the holiday swipe Download the white paper now Holiday lending decisions happen long before the holidays It’s been observed that the holiday shopping season has expanded – beginning before Black Friday – over recent years. While Cyber Week continues to generate headlines, holiday spending is becoming more distributed throughout the quarter. For lenders, that means strategies must be in place before peak shopping begins. Credit line increases, portfolio reviews, acquisition strategies and risk segmentation completed in late summer often determine how much holiday spending an institution can safely capture. At the same time, early signs of credit deterioration are emerging faster than traditional portfolio metrics suggest reinforcing the importance of identifying emerging portfolio risk early rather than relying solely on broad portfolio performance indicators. Income is becoming a stronger predictor of credit performance One of the most notable shifts in today's lending environment is the growing relationship between income and future credit performance. Experian's data suggests the market is becoming increasingly polarized. The population earning more than $250,000 annually has more than doubled since 2023, but more than one-quarter of those consumers have since moved into lower income brackets, often following retirement or job loss. Meanwhile, consumers earning less than $50,000 annually show relatively little income mobility, with approximately 85% remaining in the same income band year-over-year. These trends highlight an important reality: a credit score alone may no longer provide a complete picture of borrower risk. Four priorities before peak holiday spending With only a short window before holiday borrowing accelerates, lenders have an opportunity to strengthen both growth and risk strategies. Key areas of focus include: Refine acquisition strategies Move beyond score-only targeting by incorporating verified income, cash flow and existing credit relationships to identify qualified borrowers. Optimize existing portfolios Identify customers demonstrating positive credit migration and proactively evaluate opportunities to increase credit lines before peak spending begins. Monitor emerging credit risks Use early-stage delinquency indicators and behavioral signals to identify potential performance issues before losses accelerate. Strengthen fraud management and prevention Seasonal account openings and increased transaction volumes create greater fraud exposure. Identity verification, synthetic identity detection and dormant account monitoring remain critical during high-volume acquisition periods. Preparing for the holiday shopping season ahead The 2025 holiday season demonstrated that consumer spending decisions don't always align with consumer sentiment. How does that translate for the 2026 shopping season? For lenders, success will depend less on reacting to spending trends in November and more on making informed credit decisions months earlier. As consumer financial behavior continues to evolve, combining traditional credit data with income, cash flow and alternative data can provide a more complete understanding of both opportunity and risk. Institutions that incorporate these broader insights into acquisition, portfolio management and fraud strategies will be better positioned to grow responsibly during one of the year's most active lending periods. Ready to learn more? Access the full white paper

August 19, 2026 by Stefani Wendel
Why Distribution Matters in Income and Employment Verification 

Verification has become an increasingly important area of focus in mortgage lending, but success is about more than just coverage. In the latest episode of the Chrisman Commentary Podcast, Experian's Jamie Norris, Senior Manager of Strategic Alliances, shares why distribution and integration are increasingly the keys to driving adoption, automation, and better borrower experiences.  Why Distribution Matters in Verification  As lenders continue to pursue faster, more efficient mortgage processes, verification solutions must fit seamlessly into the systems they already use. Norris explains how Experian's strategy is focused on helping lenders access trusted income and employment data while minimizing workflow disruption by making Experian Verify accessible across loan origination systems (LOS), point-of-sale platforms, underwriting technologies, and reseller networks.  Building a Smarter Verification Strategy  The conversation explores why lenders benefit from having access to multiple verification providers, how they can optimize verification strategies to maximize automation while minimizing costs and borrower friction, and why an "instant-first" approach is gaining momentum across the industry.  Looking Ahead: AI, Automation, and the Future of Mortgage Lending  Norris also discusses how AI-driven underwriting and decisioning are reshaping mortgage technology. As lending platforms become increasingly automated, real-time verification data is expected to support faster decisioning and more streamlined borrower experiences.  She shares Experian's vision for expanding its verification ecosystem and delivering a broader suite of solutions that meet lenders wherever they work.  Listen to the full episode above to hear Jamie's insights on verification strategy, partner integrations, AI-enabled lending, and what's next for mortgage automation. 

August 18, 2026 by Ted Wentzel

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe