You should also include dates alongside the breach. Just so that one knows, if they have taken corrective action after that