customer details ?
Have customer details such as people who are authorised to have access been compromised ?
(i.e. my details )
I have a sneaky suspension they have and the longer they deny it the more customers that will swear never again...
Reputations are everything and this is not the time to fudge or use a play book for a security investigation.