One thing that would be appreciated are more details in these sorts of reports.

"the attacker gained unauthorized access to some of our infrastructure credentials"

How? Which infrastructure?

We’ll provide details in a long post-mortem. For now, it was important to notify our users as early as possible.