A key step here is to investigate how and why the security breach happened in the first place. The best to do this is through what is known as "Digital Forensics". This is where specially trained Digital Forensics Investigators collect and comb through every piece of evidence to determine this.