[koolba]

> What is an acceptable level of whitewashing when it comes to security incidents?

If you claim to be a company that takes security seriously: zero

This is maximum levels of shit hitting fans. All their customers are potentially impacted, some horrifically so. They need to alert them immediately with red alarms blazing.