> It continues to be a travesty of breach disclosure that [companies] are legally allowed to claim the best possible outcome without any proof.

what proof would you propose that you be shown? how do you prove something didn't happen?