They're claiming no 'user' data was breached. Is this just PR for "we have no clue if all your info (name, bank info, SSN, date of birth, etc) was stolen" or is

They're claiming no 'user' data was breached. Is this just PR for "we have no clue if all your info (name, bank info, SSN, date of birth, etc) was stolen" or is it "We confidently know because we audited that data access and verified the audit logs were not breached so we know your data is safe."