What you do – and how fast – after an account is compromised often matters more than it may seem