How to limit the impact of data breaches