Whenever you're ready, walk me through how you'd approach this.
How would you approach a potential data breach?
Explain how you would validate the signal, establish incident severity and scope, contain the threat without destroying evidence, investigate affected identities and systems, and recover safely. Address communication, legal or regulatory escalation, and post-incident improvements.