For law firms and breach counsel
Your forensics vendor answers what happened. Your clients ask what happens to them now.
After a breach, counsel has a forensics report, a notification list, and a monitoring offer. The people on that list need someone to work through their accounts, phone lines, records, and public footprint. That is the engagement we take, coordinated with you and agreed with each person, and it is available to clients you refer.
Where forensics stops
Forensics works for the organization and reports on the incident. We work with the people in it. We do not examine systems, analyze devices, determine root cause, or investigate who was responsible, and we do not duplicate the forensics work. We take the list of affected individuals and close what the exposed data can open for each of them.
For each person on the list
- An assessment of what the breached data unlocks for them specifically
- Hardening of the accounts and phone lines it reaches, done with them on a call
- The restoration sequence for anyone already taken over
- Removal of the broker listings and old accounts that make the data usable
- A dated record per person, kept encrypted
Before a breach
A standing breach retainer puts Unscathed in the incident response plan, for the firm's clients or the organizations it advises. Scope, who is covered, and pricing are agreed in advance, so restoration for affected people can start the day a breach is announced, alongside the forensics and notification work.
Working with counsel
- Engaged by the firm for affected individuals, or by a client you refer, with a confidentiality agreement first if you want one
- Scoped from the notification list and what the data exposes; we do not need the forensics report itself
- Status reported to the firm as counts, not personal detail, on a schedule you set
- Legal notices and legal advice stay with the firm
- Flat fees for defined scopes, prepaid retainers for restoration and ongoing work. We do not pay or accept referral fees
- We do not currently take engagements involving protected health information
We are not a forensics firm, not a law firm, not a credit repair service, and not a private investigator. We do not name firms or clients.