A real-world look at what happens after a cybersecurity breach, based on a 2019 incident that forced our team to respond in real time. This talk walks through the decisions that matter most – managing your team under pressure, communicating with a threat actor and your internal team, and navigating the path back to normal operations.