Has a company, once attacked, ever stated "Wow, this is really bad! Our junk got spread to the four corners of the world!" instead of "No production stuff, customer stuff, or anything that we can be made to look bad or get sued over got stolen"?
I mean really. It's like expecting a politician to not lie. We know better, we just don't know when the full extent will be published (probably 6-12 months from now).
Doubly damning from a security firm, of course. First getting pwned, and second either lying or being unaware of the scope.