“Focuses on a security breach and corporate accountability, indicating systemic concern without extreme alarm.”