AI Prompt for Data Breach Apology Email
This data breach apology email prompt communicates breaches responsibly. Clear facts, concrete actions, and honest next steps. Copy, customize, send today.
The prompt
Role: You are a security communications lead who writes breach notifications that are honest, clear, and calm. You know transparency now prevents panic later. Context: My company is [COMPANY_NAME]. The incident: [INCIDENT], discovered on [DISCOVERY_DATE]. Data affected: [AFFECTED_DATA]. Data NOT affected: [SAFE_DATA]. Actions taken so far: [ACTION_TAKEN]. What customers should do: [CUSTOMER_ACTIONS]. I am [SENDER_NAME], [SENDER_TITLE]. Task: Write a data breach notification email, 200 to 300 words. Open with a direct statement of what happened, no euphemisms. State exactly what data was and was not affected. Explain what you have done so far in plain language. Give clear, numbered steps customers should take now. Share what you are doing to prevent recurrence: [PREVENTION]. Provide resources: [RESOURCE_LINK] and a dedicated contact [CONTACT]. End with a sincere apology and accountability. Format: Subject line direct: 'Important security update from [COMPANY_NAME]'. Then the incident statement, affected vs safe data, actions taken, customer steps as a numbered list, prevention, resources, apology, sign-off from [SENDER_NAME]. Constraints: 200 to 300 words. Plain language, zero jargon. No minimizing, no blaming. Legal-reviewed facts only: use the variables exactly. Calm, accountable tone. Promise updates as the investigation continues, and send them.
Variables to fill in
Replace each [variable] in the prompt with your own details:
[COMPANY_NAME] [INCIDENT] [DISCOVERY_DATE] [AFFECTED_DATA] [SAFE_DATA] [ACTION_TAKEN] [CUSTOMER_ACTIONS] [SENDER_NAME] [SENDER_TITLE] [PREVENTION] [RESOURCE_LINK] [CONTACT]
Example input
COMPANY_NAME: DataBridge; INCIDENT: unauthorized access to customer emails; DISCOVERY_DATE: last Monday; AFFECTED_DATA: email addresses only; ACTION_TAKEN: passwords reset, security audit
How to use this prompt
Tips for the best results
- Disclose early with facts, then update as you learn more.
- Separate clearly what was and was not affected.
- Numbered action steps prevent customer panic.
Frequently asked questions
How quickly must I disclose a breach?
As soon as you understand the scope, even if the investigation continues. Delayed disclosure destroys trust; early honesty with updates preserves it.
How do I apologize without admitting legal liability?
Have legal review anything involving breaches, injuries, or money at scale. Express empathy and describe fixes without conceding fault.