The two economic theories I think relate to this is the rational choice theory and the lassiez-fare economic theory. The rational choice theory because the company sending the breach noticed used the 3rd party platform for their website in an effort to make the best experience for their customers. The lassiez-fare theory applies because the only government interference was the police investigating to protect the right of those who could have been affected by the breach.

For the social science principles that apply, I think that empiricism and parsimony fit well. Empiricism because they had to state factually what could be affected by the breach to the customers and parsimony because the company had to make sure they did not overcomplicate the situation in the notice so that theory customers could still understand it.