[netsharc]

To give them the benefit of the doubt, maybe those 2 compromised accounts were only able to access that tool.

A more weasley sentence would be "Evidence so far has shown that the access was limited to the customer contract search tool.", or another company had something along the lines of "Evidence so far show that no sensitive customer information was compromised."

Which can be PR talk for "We have no intrusion detection tools so we don't know what data they managed to extract".