If I'm running the company, the MOST I'll do is say there was a hacking attempt, some data MAY have been taken, and we're currently doing everything we can to figure out what was taken, how much of it, etc., and by whom. We're working with the authorities on this, and will keep our customers updated with details once we know them ourselves.
That's what I was saying. Communication is always better than secrecy when it comes to data that people have entrusted you to. How do you think it makes me feel when instead of hearing it from the horses mouth (Valve), I heard it on some news website. I'm not expecting that they are going to have all of the details right away but I do expect that they are going to inform me that a breach happened as soon as they know so I can start taking measures to protect myself.