Data Breach Preparation: Failing to Plan is Like Planning to Fail

by Michael Bruemmer 4 min read September 14, 2021

As today’s fastest-growing form of criminal activity, cybercrime is expected to cost organizations $6.1 trillion worldwide this year alone,1 with attacks on enterprises now occurring every 11 seconds2. But despite increasingly widespread growth in corporate IT security awareness, the importance of putting a sound data breach preparation plan in place for protecting your customers’ privacy and data can’t be underscored enough.

Given the scale of IT security threats, it bears reminding: Network compromise is now largely a matter ofwhen, notiffor most businesses. As a result of this shift in security and operating environments, it’s important for enterprise leaders to note thesix key reasons that most data breach responses fail:

  1. No Budget:Despite the seeming inevitability of a data breach, most companies’ average annual budget for a consumer response is exactly $0. Many companies and security teams believe they are fully prepared or won’t be targeted. But with losses due toransomware attacks up 225% lately in the US alone3, it can be an expensive gamble to make.
  2. Never Tested:Even if a company does have a data breach response plan in place, it’s not usually been stressed-tested via live exercises and drills. Having a plan in place is a great first step, but unless you test it in a live breach simulation or exercise, you can’t be certain the plan will be successful.
  3. Unknown Impact:It can be hard to know how much of your customer population has been impacted by the breach. Your plan needs to be flexible enough to accommodate both small and massive breaches.
  4. No Estimate:Data breach responses also fail because there is no estimate for the scale of phone calls, emails, and complaints that may be received. To put things in perspective: A small data breach is MUCH different and easier to remedy than a one involving millions of records.
  5. Slow to Respond:By law, firms that suffer a data breach must now report the incident to government authorities within 72 hours. Failure to address increasing regulatory compliance and information sharing needs (which demand greater oversight and overhead from organizations), can come with hefty fines.
  6. No SLAs:Companies often don’t have the necessary agreements to guarantee the infrastructure and staff to assist consumers with resolving their cases. Having a dedicated, guaranteed number of call center agents ready to go when a company experiences a data breach is invaluable.

To improve your odds of successfully defending against and responding to breaches, you’ll want to focus on strengthening four areas of operations:

  • Guarantee Resources:Ensure that you have dedicated security resources and prepared to react to threats on the turn of a dime. Your SLAs should include well-trained, certified call center agents and the infrastructure ready to go. This should include scalable and high quality identity protection services to resolve harm to your customers.
  • Readiness Testing:Failing to plan (i.e. not stress-testing your recovery plan prior to incidents occurring) is like planning to fail. By rehearsing your disaster response and recovery strategies, you’ll be able to identify any points of failure and shortcomings that you can improve upon before actual concerns arise.
  • Regulatory Needs: Emphasize quick and accurate responses to regulator inquiries by understanding the specifics for your industry and business.
  • Communications:Having a corporate communications plan ready to go in real-time is also key. Connect with your communications team to create a communications response plan prior to any incidents occurring so that all you largely need to tweak are specifics on the day of the event.

According to studies by IBM, companies can save $1.2 million off the cost of data breaches by having an incident response plan in place and extensively testing it before cyber threats strike. Bearing this in mind, the best defense against digital dangers is a good offense.Experian’s Reserved Response™was created to help organizations take a proactive approach to data breach response planning. Deploy it to put an end-to-end game plan in place and implement a step-by-step playbook that workers can follow in the event of an incident. You’ll also guarantee that your organization gains the necessary manpower, infrastructure, and response readiness needed to ensure ongoing network resilience and a speedy recovery should disaster strike.

1Cybersecurity Ventures, Annual Cybercrime Report 2020

2Cybersecurity Ventures, Cybercrime to Cost the World $10.5 Trillion Annually by 2025

3Cyberreason, Ransomware: The True Cost to Business Study 2021

Related Posts

2026 Retail Banking Identity and Fraud Report 

Learn how banks can convert rising fraud investment into protection customers recognize, value and feel in our recent report. Read more!

October 28, 2026 by Laura Burrows
One Platform, Fewer Handoffs, Faster Decisions

The average credit union manages between 100-300 vendor relationships, and nearly a third have no dedicated staff managing them. What was supposed to drive efficiency is stunting growth and compromising the member experience. Application volume is continuing to rise, and consumers expect a loan decision at digital speed. But for credit unions, meeting that expectation isn't the only goal. They must also continue to make the right lending decisions while also prioritizing risk management. The institutions pulling ahead aren't the ones with the most tools. They're the ones that have turned credit, fraud and decisioning into a single, coordinated system. A single loan decision touches: Credit data Identity verification Fraud signals Decisioning logic Reporting Rarely does all of that live in one place. More often, it’s stitched together across separate platforms, each with its own contract and its own support line. When a credit view and a fraud view are generated separately, they must be reconciled instead of read together in the same instant. Every handoff is a place where a decision slows down and a signal gets missed. It's why a fraud pattern that would be obvious next to the credit file often surfaces only after the funds are already gone. Fragmentation also makes it harder to optimize lending strategies over time. When data, analytics and decisioning are disconnected, credit unions have less visibility into what's working, what's changing and where strategies need to be adjusted. An integrated decisioning ecosystem closes those seams by design, with credit, fraud and lending strategy running on one platform and accessed through a single Application Programming Interface (API). Identity and compliance capabilities can be an integrated decisioning flow. The data doesn't need to be reconciled after the fact because it was never separated in the first place. Stop overengineering, start removing friction When decisioning underperforms, the instinct is to build something more custom: a proprietary model, tighter segmentation, more configuration.  Custom modeling has its place for institutions with the scale and data to justify it. But often, for small or mid-sized credit unions, the bigger opportunity is a flexible decisioning strategy that uses a strong, continuously refreshed model. This shouldn't be either/or. The right approach gives credit unions a strong decisioning strategy today, with the ability to introduce more customized analytics and modeling as their needs evolve.  The same principle applies to strategy management: credit unions can gain greater control through self-service capabilities as they build a more sophisticated data science team.   That kind of flexibility is important as credit unions modernize their decisioning infrastructure. Research surveying more than 2,000 senior credit risk and fraud decision-makers across 11 countries found that organizations investing in unified platforms and modern infrastructure are moving faster and realizing the greatest Return on Investment (ROI).   As their needs evolve, credit unions can adjust decisioning strategies without introducing another layer of technology or relying on third parties to make every change. Until self-service is the right fit, choose a partner that understands what makes your credit union’s membership and risk appetite different from others.  Same member, same afternoon, faster answer Consider a credit union growing its auto and personal loan originations.  A member applies for an auto loan on Saturday afternoon. Credit data, identity and fraud signals are read together in a single real-time pass instead of separate reviews:  Most applications resolve immediately, approved or declined based on a more comprehensive view of the applicant. A smaller number are flagged for quick step-up verification and cleared within minutes. Only genuinely ambiguous cases reach an underwriter, who is working from one complete picture instead of reconciling multiple signals. The member has an answer before the weekend is over. The credit union books the loan before competitors even open on Monday. Built to scale This kind of process holds up today. However, the better test is whether it holds up eighteen months from now when application volume has grown, new products are live and the data flowing through the system looks nothing like it does right now. Future-proofing isn't only about handling more volume. It's about having room to be nimbler and make adjustments as quickly as the market changes. A credit union that relies on standard models within a decisioning strategy may want more customized analytics and greater control over its strategies tomorrow. Connect with us With more than three decades of credit expertise and one of the industry's largest data footprints, Experian helps credit unions do more than solve this year's friction. We're helping to build a decisioning foundation that scales, so growth becomes something the system absorbs, rather than something it must be rebuilt around. Explore More

October 21, 2026 by Zohreen Ismail
Cash Flow Insights: Powering the Next Evolution in Lending

For decades, credit data has given lenders a trusted foundation for assessing risk. Now, consumer-permissioned cash flow data is adding another layer of insight into consumers’ financial lives, including income, spending, liquidity and changing financial obligations. The opportunity is significant. Nearly one in five consumers lacks access to or has damaged credit. New Experian research also shows that 60% of consumers who have previously been denied credit or received less favorable terms than expected believe the outcome would have been different if lenders had considered their recent income and banking activity alongside their credit history. 1,2 For lenders, cash flow insights can provide additional context about a consumer’s financial capacity and support more informed underwriting decisions. The next challenge is making those insights easier to use consistently and responsibly at scale. What are cash flow insights? Cash flow insights are derived from consumer-permissioned banking data and provide visibility into how money moves into and out of a consumer’s accounts. Depending on the information available, cash flow data can provide insight into financial behaviors such as: Income and income stability: Regular and irregular income streams and changes over time Spending and recurring expenses: Everyday spending patterns and ongoing financial obligations Account balances and liquidity: Available funds and changes in account balances Debt obligations: Loan payments and other recurring debt commitments Cash flow patterns: How money moves into and out of accounts over time Traditional credit information provides a rich history of how consumers have managed credit. Cash flow insights add context about their current financial activity and capacity, providing lenders with a more complete view of financial health. Cash flow insights can also add predictive value to risk assessment. Experian analysis shows Cashflow Score can deliver up to a 25% lift in predictive performance over conventional credit scores when tailored to targeted risk tiers.3 Cash flow data is having its moment In this Forbes article, Sandy Anderson, Experian's Executive Vice President of the Data Office and Operations, explains why more data alone isn’t enough — and what it takes to turn cash flow insights into trusted, actionable intelligence. Read the article How lenders can put cash flow insights to work at scale As interest in cash flow insights grows, the conversation is moving beyond what the data can reveal to how financial institutions can use it consistently and responsibly. That requires standardized consumer reporting, clear governance and decision-ready insights that can work within established lending processes. The launch of Experian Cashflow Data Bureau at Vision 2026 reflects this shift from access to adoption. The new consumer reporting agency operates under the Fair Credit Reporting Act (FCRA) and is designed to help financial institutions adopt consumer-permissioned cash flow insights at scale. A key part of that foundation is the cash flow consumer report, which organizes consumer-permissioned banking information into a standardized consumer report regulated under the FCRA. This gives lenders a consistent foundation for incorporating cash flow information into lending decisions while providing consumers with access to the information in their report. Watch this video to see how Experian Cashflow Solutions turns consumer-permissioned cash flow data into decision-ready attributes, scores and custom analytics, backed by bureau-grade governance. Turning greater visibility into better decisions The next evolution in credit isn’t about choosing between traditional credit and cash flow data. Each provides a different perspective. Traditional credit information offers deep insight into how consumers have managed credit over time. Cash flow insights can add context about financial activity and capacity. Bringing those perspectives together can give lenders greater visibility into consumers’ financial health and help them better distinguish between risk and resilience, support more informed decisions and identify opportunities to responsibly expand access to credit. As cash flow adoption continues to grow, its value will come from how effectively it complements the information lenders already use. The opportunity isn't simply to see more data. It's to turn that additional visibility into smarter, more informed decisions. Explore how Experian Cashflow Data Bureau is helping financial institutions put consumer-permissioned cash flow insights into practice at scale. Learn more [1] Federal Reserve Bank of New York, The Market for Credit Building: Demand, Product Characteristics and Consumer Uses, 2026. [2] Experian commissioned Atomik Research to conduct an online survey of 2,000 U.S. adults age 18+. Fieldwork took place July 16–21, 2026. Margin of error: +/- 2.2 percentage points at a 95% confidence level. [3] Based on Experian analysis when Cashflow Score is compared with conventional credit scores, tailored to targeted risk tiers. Predictability based on KS.

October 14, 2026 by Julie Lee

Subscribe to our Newsletter

Enter your name and email for the latest updates.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Subscribe to our Newsletter

Don't miss out on the latest industry trends and insights!
Subscribe