How to survive a data breach

Neil Feather
President, SiteLock

Here’s a scary thought: Nearly half (43%) of all companies experienced a data breach last year, most of which took weeks to discover. For many businesses, these data breaches were catastrophic to the point of bankruptcy (the average cost of a single compromised record being more than $194).

It isn’t necessarily the cost of compromised records that drives businesses to the ground. Lack of a proper response strategy is a major contributing factor to why businesses fail to bounce back after an attack. After all, data breaches are not 100% preventable – so in the chance you do get hacked, it’s important you have the proper recovery and response plans in place. Below are a few tips to help you get started:

Accountability and Transparency

It isn’t easy telling your customers that their private information may have been compromised, potentially putting their livelihoods at risk. However, not telling them is even worse, and will completely ruin your reputation.

One of the most important parts of running a business is making sure you take accountability for everything bad (and good) that happens, and not beating around the bush when doing so. If your company suffers a data breach, make sure to issue a response to your customers as soon as possible. Having several statements written beforehand by a legal expert can help you expedite this process.

Fraud Protection

Issuing an apologetic statement to your customers after a data breach is the very least you can do. Now that their private data is exposed, you need to take steps to protect them from fraud and identity theft.

Prepare for this by establishing a relationship with a trustworthy identity theft protection company beforehand, ideally one who works closely with top credit reporting agencies. In the event that your customers’ data does get compromised, identity theft protection will monitor their credit for any anomalies and protect against them.

Find and Fix the Threat

Before resuming any regular business activity that involves customer data, you’ll want to find and fix the threat. Unfortunately, doing so can can be difficult without the right tools and resources. Protecting your website with a scan tool is a great place to start, which can provide continuous scanning and automatic malware removal.

Has your company suffered from a data breach? If so, what did you do to reduce the damages and recover from an attack?

This article is published in collaboration with The Smart Data Collective. Publication does not imply endorsement of views by the World Economic Forum.

To keep up with the Agenda subscribe to our weekly newsletter.

Author: Neill Feather is the president of SiteLock, a global business website security services company. 

Image: A hand is silhouetted in front of a computer screen. REUTERS/Pawel Kopczynski. 

Don't miss any update on this topic

Create a free account and access your personalized content collection with our latest publications and analyses.

Sign up for free

License and Republishing

World Economic Forum articles may be republished in accordance with the Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International Public License, and in accordance with our Terms of Use.

The views expressed in this article are those of the author alone and not the World Economic Forum.

Stay up to date:

Data Science

Share:
The Big Picture
Explore and monitor how The Digital Economy is affecting economies, industries and global issues
World Economic Forum logo

Forum Stories newsletter

Bringing you weekly curated insights and analysis on the global issues that matter.

Subscribe today

About us

Engage with us

  • Sign in
  • Partner with us
  • Become a member
  • Sign up for our press releases
  • Subscribe to our newsletters
  • Contact us

Quick links

Language editions

Privacy Policy & Terms of Service

Sitemap

© 2025 World Economic Forum