> There is no “direct evidence” that the unidentified hackers are using the data they extracted to target customers

Oh, okay, you haven't found any evidence that customer data you leaked is being used yet. Gotcha. Toooootally makes everything better.