I always like companies responses to data leaks. Usually goes something like this:

"Don't worry, we have paid for a year subscription to credit monitoring service to help you"

"Please go to this link and sign up for it, they will need more personal information to complete the process"