The time period between the discovery of a data breach and a
company's public announcement is never stress-free, even if you
have managed the responses to other data breaches and your company
has a preplanned response strategy in place. The work does not end
though once all the moving parts come together and your company
announces to the public that it has experienced a data breach.
You may have carefully drafted a letter regarding the breach to
be sent to your customers, prepared detailed scripts for your call
center to follow when customers call in for information about the
breach, designed data breach information pages that will go live on
your company's website, trained your frontline employees on how
to respond to questions from customers, and hired a public
relations firm to respond to media inquiries — but you may
still have more messaging issues to manage. The examples below are
adapted from actual incidents to illustrate how companies can drop
the ball on