You expect you, an outside party, to have an answer to this within weeks of the attacks being discovered by the attacker?

Just because it's not obvious to you at this point in time does not mean the reasonable assumption is there is literally $0 in damages. One hour of investigation can easily cost thousands of dollars even if it arrives at the conclusion the attack was completely "benign."