And not lack of security.

That's bullet #1.

____

We recently experienced a cyber incident where malicious third parties attempted to access our systems. As part of this, data was extracted from one of our systems.

Which could be due to phishing and not a lack of security.