A lot of plaintiffs pursue litigation to understand what happened and why -- precisely because of poor communication from the organization.
Decide in advanced what values you want to demonstrate in how and what you say in response to a security or privacy incident, and get written commitment from business stakeholders (including legal) during your preparedness process so that everyone is accountable for how you show up in your communications.
If you don't want your public statements and customer communications to sound tone deaf, apathetic, or defensive, you need to address that internally now or folks will default to their comfort zones once they feel the heat.
It takes time to teach certain people how to treat human beings as more than potential plaintiffs, so start now.