The pet company has published almost no details about what happened, who was affected, and what personal data was exposed.