complex breach investigations