Supposed you are an operations manager for a provider of large antique car buying-and-selling service to customers. Buyers and sellers sign a form with the company that says the company will protect their personal identity from all other buyers and sellers. The company uses data mining tools and large car inventory databases to locate cars for buyers and sell them quickly.

Somehow customers' private information about current and prior car-owners has been hacked by cyber criminals through the company's website. What do you tell customers about the security breach of their personal identity information? How do you prevent it from happening again? What are some ethical guidelines you could put in place so this situation doesn't happen in the future?