How to respond when your business has been hacked