“Reports on a privacy breach investigation and audit, implying systemic security concerns without explicit victimization or immediate danger.”