I wonder what kind of organization decided to remain silent and treat its clients so disrespectfully?
I can provide several reasons, for example:
1) Their ability to compensate customers.
2) Preventing panic: since panic could lead to larger-scale withdrawals and a loss of trust in the service, resulting in losses far exceeding the amounts that were actually hacked.
3) The fact that such a hack raises further questions, implying that they may need to conduct a comprehensive review of their entire system's security which, in turn, could further undermine customer confidence.