I remember working support and being told "always say 'subset' unless you absolutely know it's exactly 100% of customers" lol

Same, there was always very specific wording we had to use unless legal approved an exact number or scope.

The lack of details itself is telling enough. Whatever comes out will be no doubt PR sanitised and some bigger clumps of truth won't make it through the PR process.