With EasyJet telling nine million customers they were a victim of a data hack, what should these people now do?