Critical details about the security breaches might have gone unreported but for the new requirements.