This seems to happen when they think it isn't their fault. As soon as it's something that could reflect negatively on them they put out the smallest most vague amounts of information possible. That happened with the xen security issue, and with the previous hack.