Breach fatigue: The human cost of cyber crisis response

Cyber incidents today are rarely short, sharp shocks. Increasingly, they unfold over weeks and leave consequences that stretch well into the future. What begins as a technical breach quickly becomes a full-scale crisis involving legal teams, insurers, regulators, boards, and customers. And while the technology gets the attention, the real cost often lies in the sustained pressure placed on the people behind the response.

In this session, Darren Hopkins, Cyber Partner at McGrathNicol, will explore the concept of breach fatigue — the physical and mental exhaustion that sets in when cyber incidents become long-running, high-stakes events. Drawing on his experience responding to hundreds of incidents across Australia, Darren will share how prolonged response efforts can drain resources, impair decision-making, and wear down even the most experienced teams.

This is not a theoretical discussion. Darren will walk through recent examples where organisations were under pressure for weeks, sometimes longer, managing evolving threats, legal obligations, and regulatory reporting, all while trying to maintain business as usual. He will share insights from behind the scenes, where senior executives, legal counsel, IT leads and communications professionals were pushed to the edge while trying to keep up with the demands of a fast-moving and unforgiving situation.

The session will also look at what comes after containment. Legal action, OAIC investigations, insurance disputes, customer compensation, and media scrutiny are now common in the months and years that follow an incident. This long tail of consequences means that breach response is no longer about the first 72 hours — it is about preparing for the next two years.

Darren will offer practical guidance on how to support teams through the full life cycle of a cyber incident. He will discuss how to identify early signs of fatigue, build response structures that can flex over time, and ensure decision-making remains strong under sustained pressure. Importantly, he will also address the need for executive support, psychological safety, and post-incident recovery planning for the individuals who carry the weight of the crisis.

For anyone who plays a role in leading, supporting or advising during a cyber incident, whether as a security leader, legal advisor, crisis manager or board member, this session will provide a grounded, honest look at what really happens when the pressure does not let up. Understanding the human cost is key to building true cyber resilience.