Honest response to compromised site | Lush

Honest? You'll note they don't say they became aware of the breach in late December.