What To Do When Your Business Gets Hacked

10/6/2025

Cyber breaches are no longer rare; they are expected. A recent study by the University of Maryland found that a cyber attack occurs every 39 seconds, roughly 2,244 times per day (SentinelOne). With the average U.S. breach costing $9.36 million (IBM), the consequences can be devastating. Having a well-prepared response plan aligned with cyber insurance is critical to limiting both financial and reputational damage.

One of the most effective steps organizations can take is to engage a breach coach. A breach coach, often an attorney specializing in cyber incident response, coordinates the entire response effort. They work with forensic teams, insurers, and regulators, while also preserving attorney–client privilege. Their expertise helps minimize legal exposure and ensures regulatory requirements (HIPAA, SEC, FINRA, CIRCIA) are met. 

Jennifer A. Beckage, Esq., CIPP/US, CIPP/E, founder of The Beckage Firm and a recognized leader in privacy law, describes it clearly: “A breach coach understands the importance of providing swift and effective incident response services. Whether for an individual or a business, breach coaches work to protect rights and interests.”

From an insurance standpoint, breach coaches complement cyber insurers by aligning legal, technical, and financial priorities during an incident. Veyrdune views breach coaches as essential partners, ensuring insureds receive not only financial protection, but also the expert guidance needed to navigate a crisis effectively. “The importance of a breach coach should not be underestimated,” states Robert Granadino, CEO of Veyrdune, “many executives don’t realize the legal ramifications of that first call, especially in the heat of the moment.”

Cyber insurance provides the resources and coverage; breach coaches help direct those resources in real time. Together, they strengthen security outcomes and help businesses recover more quickly. Importantly, breach coaches add value well before a breach ever occurs. Through risk assessments, readiness planning, and tabletop exercises, they help organizations mature their posture and prepare for real-world scenarios. This proactive approach dovetails with insurance goals: fewer blind spots, lower risk, and stronger resilience.

In today’s threat landscape, well-protected organizations take the extra step to secure their defenses and reap the benefits when the inevitable occurs. By investing in preparation and aligning with experts who understand both the technical and legal dimensions of cyber events, businesses can reduce financial loss, protect their reputation, and safeguard their future.