you sound ridiculous. sorry but you expected better than a 4 day turn around on this? pull your head out of your ass. these guys are probably still pouring over logs, doing forensics...
I don't expect them to say what it is, definitively, for a month or so.
I do expect them to give some basic initial notification to developers that a security breach has happened, it was limited to x, y, z (which they should be able to determine within a day), and what initial steps are, and have some independent way for developers to contact them.
I do expect them to give some basic initial notification to developers that a security breach has happened, it was limited to x, y, z (which they should be able to determine within a day), and what initial steps are, and have some independent way for developers to contact them.