Is This a Required Disclosure?

i'm curious, like, was this a required disclosure because of some sort of law? Like, i know that there's been some legislation over the last few years. They believe that universe either doesn't know exactly how bet it is, or doesn't want to say. It could be because they're still investigating. There's no federal law about this las in data breach, as yet. And usually they compel companies only in the case, only when hackers aces personal information.