Breaches at technology vendors are distressingly common. A recent study of 2000 top-ranked companies revealed that 80 percent of them used multiple vendors that suffered a breach. Vendor and supply chain cyber incidents pose many challenges, but common practices have emerged for navigating third-party breaches in recent years. This article examines practical goals for vendors’ breach communications in the first 72 hours and beyond, as well as handling notifications and recommended contract provisions, with insights from experts at Cooley, FTI Consulting, Holland & Knight, Morgan Lewis and Ropes & Gray. See “Ransomware and Incident Response Considerations for Global Companies” (Nov. 29, 2023).