Before regulators run to punish companies that have been hit by a burglary - who will try to cooperate.