When a company goes through a data breach, its like a major traffic accident where everyone on both sides of the highway slows down, rubbernecks, and breathes a sigh of relief, thanking themselves that “it wasn’t us”. Yet by every measure, data breaches are a matter of when, not if you’ll experience one. The average data breach disclosure notification lag time is over 30 days.For Under Armour’s MyFitnessPal, we disclosed 4 days after we became aware of the data breach. Our goal in this talk is to share some of the building blocks that made that rapid disclosure possible.