If a business suspects an SQL Injection attack, immediate steps should include isolating affected systems, assessing the extent of the breach, notifying affected parties, and working with cybersecurity experts to mitigate the impact. It is also crucial to review and strengthen security measures to prevent future incidents.