Agreed that they wanted to fully understand the extent of the hack before disclosing