I'm not an Apple user so I haven't paid close attention to it. I'm of the opinion that if customers are being affected, giving a generic "we're investigating a security incident but no cause for alarm yet" message with more info to come is better than "we're down for scheduled maintenance". The attackers already know they've been discovered either way.