A client database has been hacked – and personal details of individuals stolen. It’s every company’s nightmare, and now it’s happened. What steps should the firm take? And who needs to be notified?

In today’s world of cyber risk, a successful attack on a financial services firm’s systems is not a matter of “if”, but rather of “when”. While it makes sense to invest in the best cyberattack deterrence technology, and to put in place preventative policies and procedures, bad things can still happen to good cybersecurity programs. And when they do, it’s the firm&rs...