Thank you for your swift actions in both tracking down the facts and notifying your users even when the matter was still uncertain. An open and honest admission of the known facts and what you were doing and considering to address the potential breach is the best way to maintain customer confidence. I wish more companies would follow examples like yours in dealing with security breaches.