I'm glad to hear you are willing to make your customers whole.  For transparency sake, please tell us the method of key generation and custody for compromised coins.  This could be a valuable lesson to would-be coin makers out there. 

I hope you plan to offer a full debrief of what occurred, and not just deal with it via PM for affected owners.