If you discover a data breach you should immediately notify the proper
authority and also:
a. Document when and where you found the breach.
b. Notify the individuals whose data has been compromised.
c. Immediately remove all PII from the jeopardized system.
d. All of the above