Alex Holden discusses the challenges and pitfalls behind investigating a breach. Attributions – are they important or “nice to have”?