How useful, really, are the steps you can take after a data breach?