On [insert date] we became aware that [describe what has happened, ie how the breach occurred]. The data [accessed OR stolen OR lost OR corrupted][ may have] included personal information such as [describe data and if possible state whether you believe the recipient’s data was involved, eg the names and addresses of our some of our customers]. To the best of our knowledge, the [accessed OR stolen OR lost OR corrupted] data did not include [describe data, eg confidential customer information, bank account details, national insurance numbers or log-in details for the customer portal on our website].

We are conducting a thorough review of this incident. We are