Companies should not minimize the extent of a material cybersecurity incident by omitting material facts regarding the scope ...