I&#x27;m sorry, but this just isn&#x27;t correct. It&#x27;s hard to imagine any outside forensics investigation happening for less than $20k ($50k is a more reasonable estimate), and those outside investigations are often mandatory in breach cases. Insurance companies and, sometimes, regulated data protection usually require that the company take steps to ensure that everyone knows the limits of the attack --- and those limits, as you know, aren&#x27;t at all obvious from the attackers overt actions.<p>It looks like the attackers just fucked up a bunch of web pages. But they broke in; how do you know they didn&#x27;t leave backdoors, or exfiltrate databases? You often don&#x27;t, unless you engage an outside firm to verify.