How insurance can aid in data breach response