When records are lost or stolen, your first reaction should be to inform anyone whose sensitive information may be at risk. For example, if payroll records have gone missing, inform your employees that their SSN might have been exposed.