IDX

IDX (formerly ID Experts) provides post-breach data breach response services and identity monitoring/protection programs that organizations contract for and extend to affected individuals after a security incident. Rather than preventing breaches, IDX’s role begins after one occurs: coordinating notification mailings, running call centers for affected individuals, providing credit and dark-web monitoring, and delivering identity restoration services, work that most enterprises, healthcare systems, and government agencies do not staff for internally because breach response is episodic rather than continuous.

Founded in 2003 and based in Portland, Oregon, the company rebranded from ID Experts to IDX in 2020 to reflect an expanded focus beyond breach notification into ongoing identity protection and digital privacy products (credit monitoring, credit lock, social media and dark-web scanning) sold both direct-to-consumer and as an enterprise benefit. IDX describes itself as the largest provider of data breach response services in the US, with government and enterprise contracts alongside its consumer identity protection line.

IDX was acquired by Kingswood Capital Management, a private equity firm, which has continued to operate it as a standalone data breach response and privacy business. Its relevance to CISOs is specifically in incident response planning and post-breach obligations (regulatory notification timelines, affected-party support) rather than technical prevention or detection, making it a compliance and post-incident vendor rather than a security operations tool.