Data Breach Preparation: Failing to Plan is Like Planning to Fail

by Michael Bruemmer 4 min read September 14, 2021

As today’s fastest-growing form of criminal activity, cybercrime is expected to cost organizations $6.1 trillion worldwide this year alone,1 with attacks on enterprises now occurring every 11 seconds2. But despite increasingly widespread growth in corporate IT security awareness, the importance of putting a sound data breach preparation plan in place for protecting your customers’ privacy and data can’t be underscored enough.

Given the scale of IT security threats, it bears reminding: Network compromise is now largely a matter ofwhen, notiffor most businesses. As a result of this shift in security and operating environments, it’s important for enterprise leaders to note thesix key reasons that most data breach responses fail:

  1. No Budget:Despite the seeming inevitability of a data breach, most companies’ average annual budget for a consumer response is exactly $0. Many companies and security teams believe they are fully prepared or won’t be targeted. But with losses due toransomware attacks up 225% lately in the US alone3, it can be an expensive gamble to make.
  2. Never Tested:Even if a company does have a data breach response plan in place, it’s not usually been stressed-tested via live exercises and drills. Having a plan in place is a great first step, but unless you test it in a live breach simulation or exercise, you can’t be certain the plan will be successful.
  3. Unknown Impact:It can be hard to know how much of your customer population has been impacted by the breach. Your plan needs to be flexible enough to accommodate both small and massive breaches.
  4. No Estimate:Data breach responses also fail because there is no estimate for the scale of phone calls, emails, and complaints that may be received. To put things in perspective: A small data breach is MUCH different and easier to remedy than a one involving millions of records.
  5. Slow to Respond:By law, firms that suffer a data breach must now report the incident to government authorities within 72 hours. Failure to address increasing regulatory compliance and information sharing needs (which demand greater oversight and overhead from organizations), can come with hefty fines.
  6. No SLAs:Companies often don’t have the necessary agreements to guarantee the infrastructure and staff to assist consumers with resolving their cases. Having a dedicated, guaranteed number of call center agents ready to go when a company experiences a data breach is invaluable.

To improve your odds of successfully defending against and responding to breaches, you’ll want to focus on strengthening four areas of operations:

  • Guarantee Resources:Ensure that you have dedicated security resources and prepared to react to threats on the turn of a dime. Your SLAs should include well-trained, certified call center agents and the infrastructure ready to go. This should include scalable and high quality identity protection services to resolve harm to your customers.
  • Readiness Testing:Failing to plan (i.e. not stress-testing your recovery plan prior to incidents occurring) is like planning to fail. By rehearsing your disaster response and recovery strategies, you’ll be able to identify any points of failure and shortcomings that you can improve upon before actual concerns arise.
  • Regulatory Needs: Emphasize quick and accurate responses to regulator inquiries by understanding the specifics for your industry and business.
  • Communications:Having a corporate communications plan ready to go in real-time is also key. Connect with your communications team to create a communications response plan prior to any incidents occurring so that all you largely need to tweak are specifics on the day of the event.

According to studies by IBM, companies can save $1.2 million off the cost of data breaches by having an incident response plan in place and extensively testing it before cyber threats strike. Bearing this in mind, the best defense against digital dangers is a good offense.Experian’s Reserved Response™was created to help organizations take a proactive approach to data breach response planning. Deploy it to put an end-to-end game plan in place and implement a step-by-step playbook that workers can follow in the event of an incident. You’ll also guarantee that your organization gains the necessary manpower, infrastructure, and response readiness needed to ensure ongoing network resilience and a speedy recovery should disaster strike.

1Cybersecurity Ventures, Annual Cybercrime Report 2020

2Cybersecurity Ventures, Cybercrime to Cost the World $10.5 Trillion Annually by 2025

3Cyberreason, Ransomware: The True Cost to Business Study 2021

Related Posts

The New Competitive Advantage in Fintech Is a Unified View of the Consumer

Fintech growth is returning, but growth alone is no longer enough to separate market leaders from the rest. The next stage of fintech will be shaped by how well organizations understand the consumers they serve, how accurately they assess risk and how consistently they make decisions across the customer lifecycle. That requires more than speed, more data or a single new model. It requires a unified view of the consumer that brings together identity, credit and behavioral signals into one decisioning strategy. Experian’s 2026 State of Fintech Report identifies partnerships, data and fraud as three forces shaping the next phase of fintech growth. The report also makes a clear point: institutions that integrate these forces into cohesive strategies will be better positioned to grow with confidence. For many fintechs, the challenge is not a lack of innovation. It is the increasing complexity of turning innovation into scalable, explainable and profitable growth. Fintech organizations span a wide range of maturity, from early-stage startups to scaled lenders, and many are experimenting with new products, technologies and customer engagement models at the same time. That creates opportunity, but it also creates pressure to make more disciplined decisions. The market is rewarding institutions that connect product strategy, risk management and customer experience in a more coordinated way. This is why the unified consumer view is becoming so important. It helps fintechs turn fragmented signals into consistent decisions that support both growth and resilience. Why a unified consumer view matters now A unified consumer view means bringing together the signals that define a customer’s identity, credit behavior, financial capacity and risk profile. It moves fintechs away from isolated decision points and toward a more connected picture of the customer across origination, account management and servicing. This matters because consumer behavior is becoming more fluid, fraud is becoming more sophisticated and product strategies are becoming more specialized. A customer may appear strong through one lens and risky through another. An application may pass an onboarding check, but later show behavior that suggests emerging fraud or repayment stress. Without a connected view, those signals may stay trapped in different systems or teams. The 2026 State of Fintech Report highlights this shift across several areas. Fintechs are managing credit cards and unsecured personal loans with greater precision, recognizing that each product requires different strategies and risk controls. Credit cards require ongoing account management because exposure continues after origination. Unsecured personal loans follow a fixed repayment structure, which makes underwriting precision especially important at the point of origination. These differences show why a one-size-fits-all strategy cannot support modern fintech growth. A unified consumer view helps lenders apply the right data, risk framework and customer strategy to the right product at the right time. Siloed decisions create blind spots Many fintechs already use multiple sources of data. They may rely on traditional credit data, alternative data, fraud tools, cash flow information, identity verification and internal account performance data. If those signals are managed separately, the organization may still lack a clear view of the customer. Data can become fragmented. Risk teams can reach different conclusions than fraud teams. Product teams can pursue growth without a full understanding of emerging portfolio pressure. The State of Fintech Report points out that fintech competition is increasingly defined by the ability to align data strategies with decision frameworks. That means data is not just a support function. It is becoming central to growth, risk management and customer experience. Organizations are investing in richer datasets and more advanced analytics, but the differentiator is how effectively those inputs are operationalized. This is where many fintechs still have work to do. The value comes not from any single dataset, but from how signals are layered, interpreted and applied together. For example, a lender may understand a consumer’s credit score, but that does not always reveal broader financial behavior. Cash flow data may add insight into income and expenses, but it needs to be categorized and normalized to support reliable decisions. Identity signals may help detect fraud, but they become more powerful when combined with credit and behavioral data. A unified view brings these inputs together so fintechs can better determine whether a customer represents a growth opportunity, a fraud risk, an emerging credit risk or a borrower who needs a different product experience. Product complexity requires better decisioning The need for a unified consumer view becomes even clearer when looking at how fintechs manage different credit products. Fintech lenders continue to originate approximately 1.5 unsecured personal loans for every one credit card, which reinforces the importance of both products within portfolio strategy. Credit card originations continue to grow moderately while unsecured personal loan originations have slowed after tighter lending standards. These patterns suggest that fintechs are not simply shifting from one product to another. They are becoming more mature in how they manage each product based on its structure, risk profile and consumer use case. Credit cards and installment loans behave differently. Credit cards introduce ongoing exposure and require active account management, line management and monitoring of utilization behavior. Unsecured personal loans carry fixed terms and structured repayment schedules, which makes origination quality especially important. For fintechs, this means product strategy and risk strategy must be tightly connected. The same consumer may need to be evaluated differently depending on the product, loan amount, repayment expectations and observed behavior. A unified consumer view gives lenders the context needed to make those differences actionable. This is also where segmentation becomes more sophisticated. The State of Fintech Report’s loan segmentation framework connects strategy, risk and data advantage across small-dollar, mid-tier and large-ticket loans. Small-dollar lending can support thin-file acquisition, but may require alternative data and stronger identity visibility. Mid-tier lending may involve debt consolidation and cash flow pressure, where transaction insights and trended data can be particularly useful. Large-ticket lending can support higher-value growth, but it also creates greater exposure and may require a fuller combination of credit, fraud and identity signals. This kind of framework helps fintechs align product strategy with risk and data strategy in a more deliberate way. Fraud is making the unified view even more urgent Fraud is another reason fintechs need to move beyond siloed decisioning. Fraud is becoming more complex across the customer lifecycle. Synthetic identities, first-party misuse and AI-driven threats are reshaping the risk landscape. Traditional controls that focus primarily on onboarding are no longer enough. Effective strategies now require continuous monitoring across account access, transactions and servicing. That shift changes how fintechs should think about customer intelligence. Fraud is no longer something that only happens at the point of application. It can emerge later through account behavior, suspicious activity or patterns that look normal when viewed in isolation. Advanced identity signals, including email intelligence, are becoming more central to fraud prevention because they add context that traditional data may not capture. The report also highlights Experian’s acquisition of AtData as part of a broader recognition that email-based identity signals represent a critical layer in digital identity and fraud detection.   The takeaway for fintech leaders is clear. Identity, fraud and credit risk cannot be treated as separate problems. A customer who appears creditworthy may still present identity risk. A fraud signal may also influence credit exposure. A repayment pattern may reflect financial stress, misuse or both. A unified view helps lenders evaluate these signals together so they can make decisions with more confidence and less friction for legitimate customers. Trust is becoming a growth strategy Trust has always mattered in financial services, but fintechs now need to think about trust as a measurable part of decisioning. Customers expect fast applications, seamless experiences and fair outcomes. Regulators and internal governance teams expect transparency, explainability and consistency. Business leaders expect growth without unnecessary exposure. These expectations are difficult to meet when data and decisions are fragmented. The State of Fintech Report’s 2026 action playbook identifies trust as a function of decision accuracy, identity confidence and customer transparency. That framing is important because it moves the conversation beyond speed alone. A fast decision is not valuable if it approves the wrong customer, declines a good customer or creates unnecessary friction in the wrong place. Fintechs should evaluate where friction improves outcomes, such as preventing fraud or identifying risk, and where it creates unnecessary loss of good customers. For many lenders, the path forward is not removing friction everywhere. It is applying the right level of friction at the right moment based on a clearer view of the consumer. This is where unified decisioning becomes a competitive advantage. It allows fintechs to create experiences that feel faster and more relevant while still protecting the portfolio. It supports better segmentation, more informed offers and more consistent risk treatment. It also gives teams a shared understanding of why decisions are made, which is essential as AI and automation become more embedded in lending workflows. What should fintech leaders do next? A unified view of the consumer is not built by adding one more tool or one more dataset. It requires a decisioning strategy that connects data, analytics, fraud, identity and product objectives. Fintech leaders should start by evaluating where their current decisioning frameworks fall short. Are credit and fraud signals looked at together? Are cash flow insights being used consistently? Are identity signals monitored after account opening? Are decisions explainable across teams and channels? The 2026 State of Fintech Report recommends prioritizing experimentation tied to measurable decision lift and model performance. This means testing combinations of credit, alternative, cash flow and identity signals to determine where incremental data improves response rates, approval rates, early-loss reduction and fraud mitigation. It also means treating data and decisioning as connected priorities, with a focus on signal quality, integration and measurable impact. The goal is not to collect more inputs for the sake of volume. The goal is to understand which signals improve outcomes and how those signals should be applied at scale. For fintechs, this is the next competitive frontier. Growth will continue to depend on product innovation, customer acquisition and speed to market. But the lenders that separate themselves will be the ones that can connect those growth priorities to a stronger decisioning foundation. That requires a consumer view that is broader than a credit profile, deeper than a fraud check and more actionable than a data warehouse. It requires a unified framework that helps lenders understand who the customer is, how the customer behaves and how risk may change over time. Download the 2026 State of Fintech Report The next phase of fintech will not be defined by a single innovation. It will be defined by the ability to connect identity, credit and behavioral data into more confident decisions across the full customer lifecycle. Fintechs that build this unified view will be better positioned to grow, manage risk and strengthen customer trust in a more complex market. To explore the trends shaping fintech growth and decisioning in 2026, download Experian’s 2026 State of Fintech Report. Read now

August 4, 2026 by Laura Davis
Customer Spotlight: How Matrix Rental Solutions Strengthens Trust in Affordable Housing

Learn how Matrix continues to deliver a secure, trusted rental experience as fraud tactics evolve. Read more!

July 31, 2026 by Laura Burrows
What Is AI Decisioning?

Every business makes decisions about people and transactions all day long. Should we approve this loan? Is this purchase fraud? Which customer should get this offer, and what should it be? For a long time, those decisions were made in one of two ways: a person reviewed each case by hand, or the company wrote fixed rules, like "approve anyone with a credit score above 700." Both work. Both also leave value on the table. The manual review is slow and hard to scale. The fixed rule can turn away good applicants and is slow to adapt when the market shifts. AI decisioning is a third way. What makes AI decisioning work Instead of relying on a single reviewer or a rigid rule, automated decisioning uses models that learn from data — studying how thousands of past cases turned out, finding the patterns that predict an outcome, and applying them to each new decision, often in real time. The result is faster, more consistent decisions. But a model on its own isn't the whole story. Getting real value from AI decisioning takes good data to learn from, AI analytics to generate insights, the tools to act on it and the governance to keep it compliant. What we've found is that the pieces only pay off when they work together, and that is where we're built differently. A model is only as good as what it learns from, and we pair your data with one of the deepest views of consumer and commercial credit: decades of full-file history and vetted attributes. Then we give you the tools to act on it. Use cases across your business Whether you're trying to grow your customer base, reduce fraud, manage lending risk, or improve collections, automated decisioning brings all the pieces together to make more accurate, consistent and explainable decisions at scale. Fraud and Identity A fraudulent transaction that slips through costs money and erodes trust. Rules are static, and fraudsters move fast. They'll probe boundaries, find the blind spots and move to the next scheme. By the time the rules are updated, they're already three steps ahead. How AI decisioning changes this: AI fraud detection with real-time risk scoring and decisioning across transactions and customer interactions Intelligence that continuously learns from results to help adapt fraud strategies as threats evolve Reduced false positives and less friction for customers at account opening and checkout Identity verification tools that confirm someone is who they say they are without slowing down the experience Credit and Lending Loan approval is where the relationship begins. Credit risk decisioning helps lenders find that delicate balance between approving enough people to grow, but carefully enough to manage risk. Missing that balance means turning away good customers or taking on losses that are difficult to absorb. How AI decisioning changes this: Increased approval opportunities for creditworthy applicants without increasing overall risk Models you can update and deploy quickly as market conditions change, rather than waiting months Ability to run "what-if" scenarios to test how a new strategy would have performed on your historical data before putting it live Collections Which customer should your team reach out to today? Through which channel? What kind of message? If you reach out too aggressively, you push someone who might have recovered into default. If you wait too long, you lose them. If you call someone at work, they resent you; if you text, they might ignore it. If you offer a payment plan, they might accept it, but only if the terms make sense to their financial situation. How AI decisioning changes this: Optimized next-best-action and contact-channel strategies for each individual customer Improved recovery potential through better targeting Less time spent on accounts with a lower propensity to pay, freeing your team for higher-impact cases Ability to segment and test new strategies before rollout Customer Acqusition Finding the right customers is about reaching the right people with the right offer at the right time. To stay competitive, it’s now a requirement to balance growth with risk while creating a seamless experience converting prospects into customers. How AI decisioning changes this: More precise prospect targeting using credit, behavioral, and alternative data, where permitted, to identify consumers most likely to respond Personalized offers delivered in real time Dynamic decision strategies that can be updated quickly as market conditions and customer behavior change Ongoing testing and optimization of acquisition strategies to improve campaign performance and support customer lifetime value Driving results with AI decisioning Every customer interaction is a decision. Businesses that can adapt quickly will be better positioned to grow, manage risk, and deliver the experiences customers expect. The technology will continue to evolve, but the goal remains the same: making informed decisions that balance business objectives, risk, and customer experience. Learn more about our decisioning software

July 27, 2026 by Zohreen Ismail

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe