For data breach cases where the attacker was detected by a third-party, it took an average of 91 days to notice the attacker since 2019.