As a data controller, you must notify the supervisory authority within 72 hours of discovering a breach (GDPR article 33). Negligence can lead to fines of up to EUR 20M or 4% of worldwide turnover. You must also keep a register of breaches and, in some cases, inform the people concerned directly.

What attackers look for

Your customer databases are valued for their personally identifiable data: names, emails, phones, addresses, but also purchase histories, partial card numbers, account identifiers and behavioural data. This information is resold in bulk on dark web markets or used for targeted phishing campaigns.

The effect on reputation

A leak involving your customers is hard to contain. The media relay these incidents quickly, and class actions are multiplying. A damaged image takes years to rebuild, whereas early detection can prevent publication.

What we do

We monitor resale forums and leak databases to detect exposure of your customer data. When something is found, we give you a report ready to submit to the supervisory authority: description of the breach, data concerned, probable origin and recommended corrective measures.

How we step in

Step 01
The watch
Monitoring of the markets, forums and private channels where customer data is resold.
Step 02
The alert
You are warned before the leak becomes public, with the time needed to act.
Step 03
The regulator's file
We prepare the notification file with the elements required by GDPR article 33.

Is your customer data exposed?

A first audit to spot existing leaks and measure your GDPR exposure.

Request the first audit See the tiers