Charting institutional response to a cyberattack