“Balanced statement combining a security breach with the operational restoration of services, resulting in a mixed tone.”