Powell said the first step after receiving a breach notification letter is to verify it is legitimate. You can contact the ...