They need to come clean with an audit to avoid creating panic among users instead of issuing mere statements. !tip 1