Recognize what makes this moment difficult
Acknowledge the event directly without turning it into a lesson, comparison, prediction, or silver lining. For a message about how to complain after a company data breach, use this factual base: include the product or service, order number, dates, price, fault, prior contact, and supporting record.
Offer support that can be accepted
Offer one specific form of practical or emotional support and make clear that no immediate reply is needed. Request a specific lawful remedy and give a reasonable response date before formal escalation. Make the immediate next step clear enough that the recipient can answer without reconstructing the entire history.
Follow their pace rather than yours
Do not exaggerate, threaten staff, publish private details, or demand compensation unrelated to the loss. Use payment, regulator, insurance, police, data protection, or legal channels for fraud, danger, or unresolved rights. The recipient decides whether they want conversation, ordinary company, practical help, professional support, or quiet.