Mailing every (potentially) affected entity is common and good practice for major incidents.