A data breach could be game over for a brand