When a company has their data stolen, the first thing they do is hire external council who’s sole job is to help the company weasel out of as much reporting as possible.

If you were informed of a data breach, it’s because they literally couldn’t find a way to avoid telling you. Not getting informed does not mean you weren’t exposed.