It a company receives an anonymous email demanding ransom for the stolen personal data of...

Notify the police and Tile a criminal complaint about the incident

Start an investigation to understand the incident's possible scope, duration and nature

Send a notification to the competent supervisory authority describing the incident.

Send an email about the incident to all clients and ask them to change their passwords