[pavel_lishin]

And yet, RSA didn't come totally clean. Other companies can be served with gag orders preventing them from informing their customers of what's going on behind the scenes.

Furthermore, the NSA reading email is effectively a data breach, and many companies take the view that hiding a data breach is a good thing - no press about data breach means no bad press means no lost customers.