We are excited to release the fifth edition of our annual Data Security Incident Response Report. This year’s report provides metrics from the 750+ potential incidents our team led clients through in 2018, as well as “Take Action” segments that feature insights from our team on key response items. Because it is our Report’s fifth year, we included a special section that provides a five-year trend summary on core incident response metrics.

When we started, our goal in publishing the Report was to allow our clients to leverage the metrics and insights from our incident response experience to identify practical steps to reduce risk profiles, build cyber resilience, and facilitate incident response preparedness. Along the way, we learned that capturing and checking the data continuously throughout the year enabled us to spot emerging risks and trends faster, which we then convert into our “Cyber Response Intelligence” to improve our delivery of incident response services to our clients. A recent change in ransom demand amounts that occurred in the beginning of 2019 is an example of this intelligence – that change is covered in this Report.

Our 2019 Report continues to draw focus on the basic elements of incident response. For incident response, experience shows that focusing on the basics pays dividends. We leverage experience drawn from thousands of incidents to help entities identify and prioritize key areas to enable incremental improvement in their risk posture and incident response preparedness status.

We will host a webinar to provide more in-depth commentary on the metrics and insights from the Report on April 16 at 11:30 a.m. EDT. Register now >>

For more in-depth analysis on key items in the report, watch for our “DSIR Deeper Dive” posts in the coming weeks.

Download the Report >>

Photo of Theodore J. Kobus III Theodore J. Kobus III

Ted Kobus stands at the forefront of cyber protection — no small role in an era defined by crippling data breaches and daily digital threats. He has earned authority in the areas of privacy, data security and cybersecurity, leading clients to entrust him…

Ted Kobus stands at the forefront of cyber protection — no small role in an era defined by crippling data breaches and daily digital threats. He has earned authority in the areas of privacy, data security and cybersecurity, leading clients to entrust him with more than 6,000 data breach responses. Businesses, government and other organizations turn to Ted for sound advice on compliance, developing response strategies, breaches implicating domestic and international laws, and defense of both class action litigation and regulatory actions. Notably, he has developed key relationships with the U.S. Department of Justice (DOJ), where he and his team have helped to establish protocols to protect corporate victims following a data breach. He knows the most proactive regulators involved in this space and interacts with them regularly.

Ted has led the defense to hundreds of regulatory investigations, including those brought by the Attorney General Multi-State, Department of Health and Human Services Office for Civil Rights, Departments of Insurance, SEC and FTC. In the healthcare space, Ted has defended more than 200 OCR investigations and has negotiated more privacy/security-related resolution agreements than any other lawyer.

Ted is consistently ranked in Chambers USA: America’s Leading Lawyers for Business, and he is one of only a handful of attorneys nationwide named an MVP by Law360 for Privacy and Consumer Protection. He is a regular contributor to BakerHostetler’s Data Counsel blog, and he frequently speaks at major industry events regarding data breach response, risk management and litigation issues affecting privacy. Ted has spoken at the National Association of Attorneys General on data security issues in a closed session, as well as the National Security Cyber Specialist’s Training Conference organized by the DOJ.

Ted is the firmwide chair of BakerHostetler’s Digital Assets and Data Management Group and a member of the firm’s Policy Committee.