It’s not yet 8:00 AM on a Monday morning One of the IT staff has just called  saying that the firewall audit logs and server connection logs indicate that there was a possible data breach over the weekend