Sure, maybe this was something beyond what could be reasonably prevented by a non-state. I don't think we know yet.

But they have a duty after the fact as well, to ensure the damage is minimized. That includes actually telling those potentially impacted what is known, etc.