Given a hypothetical data breach, how would you investigate and mitigate the incident at Shelter Insurance?