Putting what we know about a data breach in writing gives us something to refer back to as we investigate. 

More importantly, it helps protect us from legal repercussions which might come later. 

Mike’s notes might look something like this:

“At around 8:40 this morning (23/11/2025), I tried to log in to my Gmail business account.

It said my password had been changed.

I immediately used my recovery phone number, changed it again, and locked the criminal out of my account.”