Why would you shut down operations when a breach was detected

Shutting down operations when a breach is detected is an important security measure to prevent further damage and data loss. By shutting down operations, the system can be isolated from the rest of the network, preventing the breach from spreading and allowing security personnel to investigate the breach and take steps to mitigate the damage. Additionally, shutting down operations can help prevent the attacker from accessing any additional data or systems.