Virtually every breach disclosure press release I've seen has included a line like this, as if it actually matters. Common practice.