January often reveals what happened while offices were closed. Inboxes were compromised, forwarding rules were created, cloud folders were accessed, and payment instructions were altered. New Jersey law does not pause for closures. The duty to investigate and, when required, to notify affected residents applies with the same force whether the breach was discovered on a weekday morning or on the evening of December twenty third. A disciplined response that preserves evidence,