Delayed or evasive breach notification compounds the original harm and destroys trust faster than the breach itself. Prompt, honest disclosure — and concrete help for those affected — is both the lawful and the decent response.
“The cover-up always costs more than the breach.”