They are individually reaching out to the actual customers who were compromised. You are making quite an assumption without seeing the individual emails.