In recent years, several federal courts have rejected claims of attorney-client and work product privilege in connection with forensic analysis post-data breach. Whereas in the past, parties assumed that such reports would be protected from discovery in data breach lawsuits or regulatory investigations, recent decisions suggest that courts do not automatically assume that forensic experts are retained for legal purposes following a data breach, complicating companies' incident response processes.