Steps to Take Immediately After a Trade Secret Breach
If a departing employee walked out with your customer list, or a competitor suddenly seems to know your pricing, the first few days can decide whether a court can still help. Cut off access, preserve evidence, identify what was taken, review the person's agreements, and get legal advice fast enough to ask a court to stop its use or disclosure.
One qualification shapes everything: under Kansas and Missouri law, information counts as a trade secret only if the business made reasonable efforts to keep it secret, so how you respond now becomes part of that record.
Hyland Law Firm LLC represents businesses in Overland Park and Kansas City, on both sides of the state line, in disputes over confidential information and departing employees. Before calling the firm, gather the agreements the person signed, any access logs, and a short timeline of what you noticed.
1. Cut Off Access to Your Systems
Close every door the person could still use. Disable their network, email, and cloud accounts; change shared passwords; revoke remote access; and collect company laptops, phones, and drives. Move quickly, but lock up rather than clean up: do not reimage a returned laptop, delete the account, or reassign the device.
2. Preserve the Evidence
Ask your technology manager to preserve the relevant systems rather than dig through them. Useful records include email forwarded to personal accounts, download logs, USB connection history, cloud-sharing activity, and recent login times.
A forensic copy made by a qualified examiner generally holds up better than screenshots if the other side later challenges the evidence. Also write down when you noticed each warning sign, since those dates can affect the deadline in step 6.
3. Identify What Was Taken and How You Protected It
Pin down exactly which information left the business, then confirm it qualifies for protection. Under the Kansas Uniform Trade Secrets Act, information such as a formula, compilation, method, or process qualifies only if it has independent economic value because it is not generally known or easily figured out by others, and the business made reasonable efforts to keep it secret. Missouri's version of the same uniform act works similarly.
Document who had access and what protected it, such as passwords, confidentiality markings, and signed nondisclosure agreements. A customer list every salesperson could email home is harder to protect than one kept behind restricted access. Because these disputes usually overlap with employment and competition issues, they are handled as part of a broader business law practice.
4. Review the Agreements the Person Signed
Gather every agreement the person signed, including offer letters and amendments. Nondisclosure, non-solicitation, non-compete, and return-of-property provisions can each support a separate claim, and both states' trade secret acts leave contract remedies in place.
Read them with enforceability in mind, since courts in either state may narrow or refuse to enforce an unreasonable non-compete. Think carefully before sending a cease-and-desist letter. It can stop casual misuse, but it can also alert someone who has not yet moved or deleted files.
5. Seek Court Relief Before the Information Spreads
If the information is at risk, talk with a lawyer promptly about asking a court to step in. Kansas courts can stop both actual and threatened misappropriation and can order protective steps such as returning copies.
Damages may cover your actual loss plus the other side's unjust enrichment or a reasonable royalty, and willful and malicious misappropriation can double that award. Missouri's act offers comparable remedies.
If the trade secret relates to a product or service used in interstate commerce, the federal Defend Trade Secrets Act also allows a lawsuit in federal court. In extraordinary circumstances, it permits a seizure of property without advance notice when an ordinary court order would not work and the material would likely be destroyed or hidden.
Filing a lawsuit does not put your secret on public display. Kansas and Missouri courts must take reasonable steps, such as protective orders and sealed records, to keep it confidential.
6. Confirm Your Filing Deadline
In Kansas, you must file a trade secret lawsuit within three years after you discover the misappropriation or reasonably should have discovered it. Missouri allows five years, and the federal Defend Trade Secrets Act sets a three-year limit using the same discovery rule. Under all three laws, ongoing misappropriation counts as a single claim, so continued use doesn't restart the clock.
Treat the deadline as an outer limit, not a reason to wait. The clock can start before you confirm the breach if the warning signs were already there, and a business that sits on a known breach may struggle to show it needs urgent protection.
Protecting Your Business in the Days After a Breach
None of these steps work well on their own. Cutting off access without preserving evidence can erase the proof you need, and a careful record of what was taken helps little if the information spreads or the filing deadline passes before you act. A business is strongest when it takes these steps early, while the facts are fresh and every option is still open.
Attorney Charles Hyland of Hyland Law Firm LLC helps businesses in Overland Park, Kansas City, Kansas, and Kansas City, Missouri, make these decisions. His background in commercial litigation, contracts, and non-compete disputes includes defending a former employee against a Kansas trade secret claim. If confidential information has left your company, call (913) 498-1911 to discuss the steps that fit your situation.