Always bearing it in mind that victims of loss or leakage of client information or a information security incident causing any damage to clients are the clients, you together with other company members including manager(s) must, as a general rule, report the accident immediately to all clients who are likely to incur any damage as a result of it, provide them with an explanation of the background to it, and apologize to them.