A cyber incident can cause serious harm even when the business keeps operating. Assess information loss, legal duties, customer trust, and wider business impact—not only downtime.

If sensitive data is shared with a public AI tool, act quickly: stop further sharing, assess exposure, protect accounts, notify responsible owners, and improve data controls.