Every day without a scope statement is a day the 'willful or grossly negligent' argument gets easier to make — and under certain state protections, that's 3x damages plus $750 per head, with the 72-hour clock turning on whether Account Key material was in that database. Telling us what was taken now is cheaper than explaining the silence later.
Sarah