If your data has been compromised, immediately change your passwords. You need to contact the credit reporting agencies, put fraud alerts with them so that you’re notified if there’s an issue, and you need to freeze your credit report.
As soon as you do those three things, if you are part of a data breach and you’ve gotten a notice letter, immediately contact the lawyer.