Data breach is not one-size-fits-all