Makes you wonder if there are data breaches that don't make the news, doesn't it?
Businesses would rather keep breaches a secret. If they do announce a breach, they don't want to give details how it was possible. Perhaps a hacker can find entry to the database, with or without a password. Or perhaps it was an inside job, and then they certainly don't want to admit that could happen.
The security experts also don't want to reveal their secrets. They don't need competitors in the security field. And if a secret gets out, there are hackers quick to take advantage of it.