Rebuilding trust after a data breach
Self-reported trust, pre/post redesign
After a public breach, self-reported trust in the security center cratered to 32%. The team needed to know whether more reassurance copy would help — or if trust required something else entirely.
Fourteen customers, three weeks — contextual interviews paired with a short diary study tracking how people actually engaged with security notifications day to day.
The finding that mattered: people didn't want more security theater, they wanted to see exactly what had changed. A visible, itemized change log took trust from 32% to 78%.