In the US, companies have essentially two lawsuit survival strategies: don't communicate anything to customers until it has been reviewed by an array of lawyers, or communicate without review and without creating a record.