Tell me about a time you had to deliver bad news to a customer regarding a security incident. How did you handle it?