Being on Heroku and dealing with the lack transparency of the security breach by Salesforce speaks to opposite of them being truthful. How long did it take the

Being on Heroku and dealing with the lack transparency of the security breach by Salesforce speaks to opposite of them being truthful. How long did it take them to admit to being breached? We had to get our information from 3rd parties about the breach and that we needed to rotate secrets.