What to do if there's a data breach? Action plan and guide