New Multidisciplinary Task Force at Kroll Helps Clients Respond Immediately to Data Loss or Theft

Kroll, the world's leading risk consulting and technology company, announced that it has launched a new service line dedicated to data breach investigation and response. The Data Breach Services team uniquely combines Kroll's expertise in investigative fact finding, information security, computer forensics, and identity theft monitoring, and, when identity theft occurs, consumer consultation and identity restoration.

With consumer identity theft on the rise1 and increasing awareness of data breaches as the potential source, companies are required to comply with reporting and notification requirements outlined by Federal, state and local laws, as well as government agencies. In fact, 45 states have laws specific to data breaches involving personally identifiable information (PII), specifying unique requirements for companies to follow. In addition, the FTC, HIPAA, Gramm-Leach-Bliley Act (GLBA), and the HITECH Act all outline additional requirements that may apply.

"Business leaders confronting data breach situations often find the complexity daunting, at best," said Ben Allen, CEO of Kroll. "At worst, they face unanswered questions that are potentially devastating in their implications. They need to know: how did the incident happen and what is required to ensure it doesn't happen again?

"Further, there are questions about what specific data was compromised and how best to minimize potential liability and meet regulatory obligations," Allen said. "With corporate reputation also at risk, business leaders must respond quickly and diligently to the crisis."

The Data Breach Services group at Kroll combines more than 35 years of investigative experience with the company's leading-edge technology expertise. A track record of proven results in resolving issues at every stage of a client's event positions Kroll as the foremost source for an integrated, end-to-end solution tailored to the client's business and the specific data breach scenario.

In cases ranging from hardware theft to computer hacking or network intrusion, Kroll's information security experts deploy immediately to assess the incident. They ensure that the data loss is contained and preserve the evidence to be examined by investigators.

Next, Kroll's computer forensic engineers and licensed investigators validate the scope of the loss or theft and make efforts to track down and recover lost or stolen devices. If necessary, Kroll can quickly mobilize a team to review, using Kroll's proprietary technology and experienced staff, any volume of data and documents from compromised data sources to accurately determine exactly what personally identifiable or other sensitive information was exposed. The facts gathered from this analysis helps inform decisions about notification of individuals whose personal information was exposed. The Data Breach Services group can design and implement an appropriate remedy for affected individuals, including identity theft monitoring and restoration services. Overall, Kroll's seamless customizable solution mitigates the liability, reputational damage and regulatory risk that companies face in data breach crises.

"We've been providing these services to clients for several years, but in a piecemeal way," explained Andrea Johnson, Vice President, Data Breach Services. "Experience has taught us that linking our investigative skills, data forensic expertise and notification services provides more insight and timely information so that clients can rapidly respond to incidents and resolve them. By decreasing the time for validating the scope of the data breach and notifying the affected individuals, we ultimately reduce the cost and risk to the client."

Kroll's Data Breach Services group operates from offices across the country and provides immediate access to investigators and information security experts via an 'on-call' system. The company's data breach hotline (877-300-6816) is available 24/7 and ensures a rapid response. About Kroll Kroll, the world's leading risk consulting company, provides a broad range of investigative, intelligence, financial, security and technology services to help clients reduce risks, solve problems and capitalize on opportunities. Headquartered in New York with offices in more than 55 cities in 27 countries, Kroll has a multidisciplinary team of approximately 3,000 employees and serves a global clientele of law firms, financial institutions, corporations, non-profit institutions, government agencies, and individuals. Kroll is a subsidiary of Marsh & McLennan Companies, Inc. (NYSE: MMC), the global professional services firm. 1 Federal Trade Commission