When companies suffer security breaches, it is how they handle them - and the customer - that counts.