I am surprised they directly confirmed this at all given that they are a Japanese company and admitting that they were vulnerable to an issue like this is very shameful for them. Directly admitting to what happened to their customers base is not something they would take lightly.