Breach Basics: Preparation for the Inevitable

This HackerOne guidance explains best practices for data breach response, including immediate incident response actions, determining what data was exposed and how, legal notification considerations (e.g., US state laws and GDPR), and communicating with affected individuals. It emphasizes distinguishing vulnerabilities found via bug bounties from breaches, offers recommendations on handling extortion and bounties, and encourages producing technical post-mortems and regular exercises to improve readiness.