Resources

Draft: pending legal review.

Directories to use alongside your plan. Each one links to official sources, and the plan points to the right one at each step.

• Who to report to

  Law enforcement, regulators, and card-industry contacts, with each deadline clock linked to where it is filed.

• Platform incident contacts

  How to report a compromise, recover an account, and get logs from Microsoft 365, Google Workspace, AWS, and other common platforms.

• Find a breach lawyer

  Check your insurance first, use a bar referral service, or review firms that advertise breach response.

• Cyber insurance directory

  Find your insurer's claims contact, or learn how to get cover after a breach.

• Choosing an incident-response firm

  Neutral guidance, official lists, how insurers handle approved vendors, and questions to ask before you sign.

• For affected individuals

  Official resources for people whose data was exposed, and what a business can point them to.

We have no affiliation or commercial relationship with the organizations listed in these directories. Listings are not endorsements. See the disclaimer. Looking for statistics and frameworks? See the older reading list.