The PCI Security Standards Council will not conduct forensics investigations either directly or through a third party in the event of an account compromise.
Article Number 1094
How do I contact the payment card brands?
Are compliance certificates recognized for PCI DSS validation?
Can an entity be PCI DSS compliant if they have performed quarterly scans, but do not have four “passing” scans?
How do I determine whether my business would be required to conduct an independent assessment or a self-assessment?
Does PCI SSC provide a list of PCI DSS-compliant service providers?