You only have to disclose what you have definitively discovered, not what you have definitively ruled out. Think how your customers would react if they were ha

You only have to disclose what you have definitively discovered, not what you have definitively ruled out. Think how your customers would react if they were hacked and harmed. It is paramount that you err on the side of caution otherwise your bank account might be negatively impacted if your customers exercise due caution and react appropriately to the news. Just remember the slogan: “My money is more important than your safety.”