For data breach cases where the attacker was detected by a third-party, it took an average of 136 days to notice the attacker prior 2019.