Skip to Content

Breach response services

We will supply the policyholder with information about our vendors, answer their questions and we'll arrange introductory calls between the policyholder and those providers that are best suited to their breach.

Legal advice

If a breach occurs that may require notification under relevant breach notice laws or regulations, legal services are included with your policy to assist in the investigation and response. The BBR Services team will arrange legal services for you and will connect you to these experts.

USA

Baker Hostetler LLP
bakerlaw.com
Eckert Seamans LLC
eckertseamans.com
Lewis Brisbois
lewisbrisbois.com
McDonald Hopkins LLC
mcdonaldhopkins.com
Mullen Coughlin
mullen.law
Nelson Mullins
nelsonmullins.com
Polsinelli PC
polsinelli.com
Shook, Hardy & Bacon L.L.P.
shb.com

Canada

Blakes
blakes.com
Dolden Wallace Follick
www.dolden.com
Edelman
www.edelman.com
Fasken Martineau DuMoulin 
www.fasken.com
Nnovation
www.nnovation.com
Norton Rose Fulbright
www.nortonrosefulbright.com/en-ca

Mexico

Calderon & De La Sierra 
www.cyslaw.mx
Davara Abogados 
davara.com.mx
Lex Informática  
www.lexinformatica.com
R1OS Abogados 
riosabogados.com  

Breach investigation

In the event external assistance is needed to assess the impact of a breach on your computer system, forensic services will be provided to help to determine the existence, cause and scope of the breach, and the extent to which notification must be provided to comply with Breach Notice Laws.

The computer security expert that provides forensic services will require access to information, files and systems, and it is important for you to comply with the expert’s requests and cooperate with the investigation. Reports or findings of the expert will be made available to you, us, the BBR Services team and any attorney that you retain to provide advice with regard to the incident.

USA

Ankura
ankura.com
CRA – Charles River Associates  
crai.com
Crowdstrike  
crowdstrike
Kivu Consulting  
kivuconsulting.com
KPMG
advisory.kpmg.us/
Kroll  
kroll.com
Lodestone
lodestone.com
LMG Security  
lmgsecurity.com
Mandiant
mandiant.com
Palo Alto Networks, Unit 42
paloaltonetworks.com
RSM  
rsmus.com
SecureWorks  
secureworks.com
SpearTip
speartip.com
Stroz Friedberg   
strozfriedberg.com
Sylint  
sylint.com
Tetra Defense  
tetradefense.com
Tracepoint, a Booz Allen Hamilton Company
tracepoint.com
Verizon
verizon.com

Canada

CRA
www.crai.com
Crowdstrike
www.crowdstrike.com
CyberClan
www.networktestlabs.com
KPMG
www.kpmg.ca
Mandiant
mandiant.com
OKiOK
www.okiok.com
Stroz Friedberg Canada
www.aon.com
Unit 42 -Palo Alto Networks
unit42.paloaltonetworks.com

Mexico

KPMG 
kpmg.com/mx
Mandiant
mandiant.com
MaTTica 
mattica.com
Scitum  
www.scitum.com

Breach response

Notification and call center services
Following an actual or suspected breach, the BBR Services team will assist you with arranging notification and call center services. The BBR Services team will walk you through details such as how to work with privacy counsel to develop notification letters and the process for providing these notification letters, as well as any other required deliverables, to the notification vendor in a timely manner. Call center services will be available for up to 90 days and during standard business hours.

The BBR Services team will also walk you through developing a set of frequently asked questions (FAQs) for use by the call center and how to anticipate and prepare for call escalations.

USA

Dasher
dasherinc.com
Epiq Corporate Services, Inc.
epiqsystems.com
Experian
experian.com
Intelligent Business Concepts, Inc.
intellbc.com
Kroll
kroll.com

Canada

Epiq
www.epiqglobal.com
Equifax
www.equifax.com
Miratel Solutions Inc.
miratelinc.com

Mexico

Business Advantage
business-advantage.com.mx
Konecta
grupokonecta.com
Epiq Corporate Services, Inc.
epiqsystems.com
Experian
experian.com

Credit and identity monitoring
Your policy includes one and three bureau credit monitoring, identity monitoring as well as identity restoration services. The BBR Services team will advise you on which products or solutions may be applicable for a particular breach incident.

A product or solution may be offered where reasonably practicable and only to the extent available in a particular jurisdiction. Notified Individuals have up to 90 days from your mailing of the notification to enroll in an offered product or solution. Enrollees of an offered product or solution will have access to the services provided under such product or solution for 12 months from the date of their enrollment.

Credit monitoring products
Equifax
Experian

Credit monitoring products

  • Equifax Complete TM Advantage Plan (for Canadian residents only)
  • Equifax Credit File ID Alert TM (for Canadian residents only)

Continue to equifax.com
Credit monitoring products
Experian IdentityWorks SM
  • Credit: Ensures they have access to credit monitoring (1 or 3 Bureaus), Identity Restoration services and identity theft insurance to help them regain their security.
  • Minor Plus: Monthly monitoring of Experian information for every enrolled child, internet surveillance, Identity Restoration services and identity theft insurance.

Continue to experian.com

Identity monitoring products
Experian

Identity monitoring products

  • Experian’s Identity and Identity Minor: A solution for when credit monitoring isn’t needed. This cost effective product scours chat rooms, blogs, websites and other data sources to identify and alert members of the illegal trading and selling of personal identities. Includes Identity Restoration and identity theft insurance.

* Subscribers will automatically receive access to Identity Restoration services from the date of the notification letter through the full duration of the product term, even if consumers don’t enroll in the product. If they do enroll in an IdentityWorks product, identity restoration is extended through the full duration of the product term as well. Product enrollments must occur prior to the Enrollment End Date indicated on the order form.


Continue to experian.com