Have your lawyers looked into whether anything can be done in the customer contracts, to help avert having to disclose this info to them (and all the damage that might mean for your trust-based business)?