The company has put out a brief security report that summarises the 'what', but not yet the 'how' or 'why'.