Why a Credit Freeze is the Best Response to a Data Breach