Then systems start going down.

In this episode of Behind the Breach, host Amber Wuollet follows a fictionalized ransomware scenario involving a mid-sized toy manufacturer and distributor during its peak holiday season. She’s joined by Dominik Cvitanovic, breach counsel and attorney at Wilson Elser, to walk through the first seven days of the incident — from the first signs of trouble, to ransomware confirmation, attacker communication, legal considerations, and the pressure of restoring operations under uncertainty.

Together, they explore what happens when a ransom note appears, data may be at risk, and the threat actor suddenly goes silent mid-negotiation.

In this episode:

• Why incident response planning matters before systems go offline
• How cyber insurance can help connect organizations with expert support
• Why ransomware response involves legal, financial, operational, and reputational decisions
• What organizations should consider before engaging with a threat actor
• Why the first week can shape the direction of the response

Behind the Breach is a Cowbell podcast exploring what happens inside a cyber incident — and what organizations can learn before one happens to them.

Guest: Dominik Cvitanovic, Attorney at Law, Wilson Elser

Host: Amber Wuollet, Director of Product & Lifecycle Marketing, Cowbell

Disclaimer: This episode is for informational purposes only and does not constitute legal, insurance, or cybersecurity advice.

In this episode of Behind the Breach, we walk through a simulated cyber incident in real time — following a fictional company from initial detection through containment, investigation, and the path toward stability.

Joined by Cowbell’s Resiliency Services leaders, Matthieu Chan Tsin and Joe Hoosech, this episode explores what actually happens inside an organization during a breach — not in theory, but in practice.

You’ll hear:

• What the earliest signs of an attack look like
• How teams move from detection to containment
• The role of incident response planning in the first hours
• How forensic investigations begin
• What stability looks like after the initial disruption

This is a narrative walkthrough designed to help brokers and business leaders better understand how cyber incidents unfold — and how response takes shape in real time.

Behind the Breach is a Cowbell podcast exploring what happens inside a cyber incident — and what organizations can learn before one happens to them.

Guest: Matthieu Chan Tsin, Head of Resiliency Services, Cowbell, and Joe Hoosech, Principal, Cowbell Resiliency Services–Incident Response

Host: Amber Wuollet, Director of Product & Lifecycle Marketing, Cowbell

Disclaimer: This episode is for informational purposes only and does not constitute legal, insurance, or cybersecurity advice.