You've been hacked: What to do in the first hour