Data breach has, unfortunately, become a fact of life. Practically every corporation has experienced some sort of security incident, although most have avoided (to their knowledge) significant network intrusions and loss or destruction of data on the scale of Sony, Target and the Office of Personnel Management. While the number of major security events has exploded and the space has experienced growth in the professional ranks, there remain a number of myths and common challenges in breach response.