Unit 42 Global Incident Response Report

Unit 42 clocked data leaving inside the first hour in nearly a fifth of its 2024 cases

The 500-plus engagements behind that share are all companies that already needed an outside responder, so the figure describes how fast a bad day closes rather than your odds of having one. It still decides which of your controls can fire in time.