How to cut the cost of a data breach