Data breach customer notice
A breach notice must be clear, short and actionable: what happened, which data, what the company did and what customers should do.
Template
Subject: Security notice about your account
Dear [Name],
On [date] we detected unauthorised access to our systems. Your [name, email, phone] may have been affected. [Passwords / card details] were not.
What we did: closed the access, started an independent investigation, notified the regulator.
What you can do: change your password, turn on two-factor authentication and watch for suspicious emails that appear to come from us.
Questions: [contact]. We are sorry for the concern this causes.Notes
Deadlines: GDPR Articles 33 and 34.
General information, not legal advice. In real cases we work alongside lawyers who specialise in digital rights.
Frequently asked questions
How much detail?
Enough for customers to protect themselves, without technical details that help attackers.