An organization learns that a service provider experienced a breach last month and did not notify the organization. Which of the following should be the informa...