“Framing a security breach as a market opportunity creates a mixed tone, while the summary explicitly acknowledges system limitations.”