A breach notification strategy for cyber attacks is needed