In this episode, we talk about the risk of data breaches and how to time a data breach announcement. We talk about the recent AT&T example and discuss incident response, customer reporting, regulatory involvement, and customer compensation. Is credit monitoring enough?