“Fact-based reporting on a cybersecurity incident with standard corporate language and no emotive framing.”