When an online account is compromised, the first few minutes may determine how bad the incident ultimately gets.