In this case they mentioned that they had no evidence that these files [name, account name, password, address and e-mail address] were accessed, which implies to me that they had also no evidence for the contrary.
As a proactive measure, they should make sure everyone potentially involved to get this message.
|