The comms for this security breach is a textbook case study of what NOT to do