Data Breach Disclosure at a Regional Bank
Controlled disclosure that kept the bank the credible source.
A regional bank discovered a breach affecting customer records. A journalist already had the story. The bank had 36 hours before publication, no agreed set of facts, and no regulator notification prepared.
We stood up a joint legal, technical and communications cell, established what could be said with certainty, and sequenced disclosure — regulator first, then affected customers, then press — so the bank stayed ahead of the story at every step. Executives were prepared for hostile interviews within a day.
The bank's own statement led the coverage rather than the leak. Regulatory notification was filed inside the statutory window, and tracked sentiment returned to its pre-incident baseline within 60 days.
Other work
Stalled Infrastructure Programme Re-Baselined
Delivered on a revised baseline the lender would accept.
Forensic AuditProcurement Fraud Across Three Subsidiaries
Evidence that survived cross-examination.
Crisis InterventionOperational Shutdown Averted
Production restored inside 72 hours.