Vague
What exactly is a 'security incident'? These vague ravings do not help affected people know what to expect or what they should do. What personal details have been compromised? Any financial information compromised?
Recently I had bogus charge on my credit card which was caught within seconds by the bank. It was a pain to get a new card but there was other damage and I know exactly what to do and the communication with the bank told me what to expect. This is the type of information consumers need to know. Even if it is unclear how the CC was compromised (another issue) I knew what was happening, what to do, and what to expect within a few minutes with no double-talk.