“Headline uses 'claims' and 'compromised' to frame potential security threat, though summary undercuts alarm by noting data's public availability.”