In other words, either the DB was definitely breached, or they're too incompetent to know if it was or not.