You notify every financial institution your friend has ever dealt with. Some respond quickly, others not so much. But at least the breach is now logged across the board.
Some accounts are shut down. Others are flagged. And in time, recovery becomes possible—even if not total.
"In crisis, information is your strongest currency."