If customer information may have been exposed or visitors were placed at risk, transparency is important. Depending on the nature of the incident and applicable privacy regulations, informing affected customers may be both the responsible and legally required course of action.