Suppose a secret like some personally identifying information was recently leaked into the main branch. You are legally required to scrub it. How do you fix it?

Suppose a secret like some personally identifying information was recently leaked into the main branch. You are legally required to scrub it. How do you fix it? Ideally a repo needs to reflect the state of every event that happened. Practically there are edge cases when it's just best to rewrite history.