The first thing the company ABC should do is to reset all the passwords to prevent another unauthorized access in short-term. Moreover, the company is ought to design and implement a plan to reinforce their security system in order to prevent attacks in the future.
Notifying the clients is also necessary since they are lawfully entitled to be notified about the breach in their information, and will prevent a taint for covering the issue up in the company's reputation.
