I would like one company to post an "incident" reveal in a more honest way: " Due to our carelessness and relatively insecure practices, we had improperly disc

I would like one company to post an "incident" reveal in a more honest way: " Due to our carelessness and relatively insecure practices, we had improperly disclosed user accounts to a moderately savvy hacker. We realize this is our fault. If you'd like to help and given that we have your attention now, it would be valuable if you can help pentest our servers: the attacker used a simple SQL attack based on an unpatched server via CVE-3245. Are we missing anything else? Please let us know. Thank you."