I disagree that you can infer anything about impact because they were found in an audit. That just means they weren't publicly known, it does not mean they were

I disagree that you can infer anything about impact because they were found in an audit. That just means they weren't publicly known, it does not mean they weren't known to someone.