You get to the office, log onto your computer, and realize something isn’t right. Maybe you can’t get into your email. Maybe a pop-up window is warning you about malware, but the alert isn’t from your antivirus program. You’ve been hacked. Your practice has an incident response plan. It’s a HIPAA requirement. But whom do you phone? What should you do? Do you even know where to find a copy of the plan?