A security breach has occurred involving the company e-commerce server. Customer credit card data has been released to unauthorized third parties. Which of the following lists the appropriate parties to inform?

A.
Shareholders, law enforcement agencies and company employees

B.
Affected customers, credit card companies and law enforcement agencies

C.
The Internet Service Provider, ICANN and company shareholders

D.
External security consultants, company board members and affected customers