a. Notifying affected employees immediately so they can place a freeze on their credit.
b. Activating the incident response plan to contain the breach and preserve forensic evidence.
c. Migrating the compromised database to a new server to prevent further data exfiltration.
d. Requiring all employees with system access to undergo emergency data privacy retraining.