When to call for help after a data breach