Your security team—whether internal or external—will need to work with your privacy team to determine the impact of the loss of data (and whether notifications may be necessary).