“Reports a security incident and service disruption with a reassuring mitigation clause, balancing concern with corporate responsibility.”