It's not unreasonable to expect better transparency, that's something that's improving too slowly. We don't even know if this was exploited yet and it's been a couple months and there's always a lot of opacity around hacking incidents.

Security is hard and accidents are easy, dropbox once had a four hour period where they didn't verify passwords!

http://techcrunch.com/2011/06/20/dropbox-security-bug-made-p...