“Factual reporting of financial remediation, balancing the negative event of a hack with the positive action of covering losses.”