Schrödinger's breach
Excuse my ignorance here, but every time I see a breach and they tell me that "there is no evidence that vulnerabilities have been exploited", I ask myself two questions:
1. Because you have not seen any pilfered data in the wild, it does not mean it hasn't been taken. Not all of it ends up in ransom.
2. If I were a clever bad actor, I would make sure not only that you cannot find me, but also that you did not see me get in. A bit like avoiding cameras during a break in.
These clichés statements really get up my t**s. Just a way of saying, I'm sorry BUT it doesn't matter anyway as nothing happened.