Immediate action is crucial. Activate your Incident Response Plan, contain the breach, notify affected parties, and take steps to prevent future incidents. Consult legal counsel for compliance with notification laws.