Sure. Companies always disclose events when doing so is contrary to their interests.
You are generalizing. I am not. There are laws/rules policies around hacking incidents. While they do happen, they don't happen all the time. But when they do, it is never just one person who has been impacted.
The OP has not told the true/full story.