Breach response services

We will supply the policyholder with information about our vendors, answer their questions and we'll arrange introductory calls between the policyholder and those providers that are best suited to their breach.
Legal advice
If a breach occurs that may require notification under relevant breach notice laws or regulations, legal services are included with your policy to assist in the investigation and response. The BBR Services team will arrange legal services for you and will connect you to these experts.
Baker Hostetler LLP
bakerlaw.com
Eckert Seamans LLC
eckertseamans.com
Lewis Brisbois
lewisbrisbois.com
McDonald Hopkins LLC
mcdonaldhopkins.com
Mullen Coughlin
mullen.law
Nelson Mullins
nelsonmullins.com
Polsinelli PC
polsinelli.com
Shook, Hardy & Bacon L.L.P.
shb.com
Blakes
blakes.com
Dolden Wallace Follick
www.dolden.com
Edelman
www.edelman.com
Fasken Martineau DuMoulin
www.fasken.com
Nnovation
www.nnovation.com
Norton Rose Fulbright
www.nortonrosefulbright.com/en-ca
Calderon & De La Sierra
www.cyslaw.mx
Davara Abogados
davara.com.mx
Lex Informática
www.lexinformatica.com
R1OS Abogados
riosabogados.com
Breach investigation
In the event external assistance is needed to assess the impact of a breach on your computer system, forensic services will be provided to help to determine the existence, cause and scope of the breach, and the extent to which notification must be provided to comply with Breach Notice Laws.
The computer security expert that provides forensic services will require access to information, files and systems, and it is important for you to comply with the expert’s requests and cooperate with the investigation. Reports or findings of the expert will be made available to you, us, the BBR Services team and any attorney that you retain to provide advice with regard to the incident.
Ankura
ankura.com
CRA – Charles River Associates
crai.com
Crowdstrike
crowdstrike
Kivu Consulting
kivuconsulting.com
KPMG
advisory.kpmg.us/
Kroll
kroll.com
Lodestone
lodestone.com
LMG Security
lmgsecurity.com
Mandiant
mandiant.com
Palo Alto Networks, Unit 42
paloaltonetworks.com
RSM
rsmus.com
SecureWorks
secureworks.com
SpearTip
speartip.com
Stroz Friedberg
strozfriedberg.com
Sylint
sylint.com
Tetra Defense
tetradefense.com
Tracepoint, a Booz Allen Hamilton Company
tracepoint.com
Verizon
verizon.com
CRA
www.crai.com
Crowdstrike
www.crowdstrike.com
CyberClan
www.networktestlabs.com
KPMG
www.kpmg.ca
Mandiant
mandiant.com
OKiOK
www.okiok.com
Stroz Friedberg Canada
www.aon.com
Unit 42 -Palo Alto Networks
unit42.paloaltonetworks.com
KPMG
kpmg.com/mx
Mandiant
mandiant.com
MaTTica
mattica.com
Scitum
www.scitum.com
Breach response
Notification and call center services
Following an actual or suspected breach, the BBR Services team will assist you with arranging notification and call center services. The BBR Services team will walk you through details such as how to work with privacy counsel to develop notification letters and the process for providing these notification letters, as well as any other required deliverables, to the notification vendor in a timely manner. Call center services will be available for up to 90 days and during standard business hours.
The BBR Services team will also walk you through developing a set of frequently asked questions (FAQs) for use by the call center and how to anticipate and prepare for call escalations.
Dasher
dasherinc.com
Epiq Corporate Services, Inc.
epiqsystems.com
Experian
experian.com
Intelligent Business Concepts, Inc.
intellbc.com
Kroll
kroll.com
Epiq
www.epiqglobal.com
Equifax
www.equifax.com
Miratel Solutions Inc.
miratelinc.com
Business Advantage
business-advantage.com.mx
Konecta
grupokonecta.com
Epiq Corporate Services, Inc.
epiqsystems.com
Experian
experian.com
Credit and identity monitoring
Your policy includes one and three bureau credit monitoring, identity monitoring as well as identity restoration services. The BBR Services team will advise you on which products or solutions may be applicable for a particular breach incident.
A product or solution may be offered where reasonably practicable and only to the extent available in a particular jurisdiction. Notified Individuals have up to 90 days from your mailing of the notification to enroll in an offered product or solution. Enrollees of an offered product or solution will have access to the services provided under such product or solution for 12 months from the date of their enrollment.