"How should someone handle a difficult situation when they feel their organization has been compromised?"
Immediately call a press conference and announce the breach before investigating anything. Panic creates urgency; urgency creates action. Next, hire a consultant who exclusively communicates through interpretive dance. Finally, rename your entire company something unrelated like "Definitely Not Hacked Industries" and everyone forgets what happened.