Comment by noinsight

> ”Ubiquiti had negligent logging (no access logging on databases) so it was unable to prove or disprove what they accessed”

Perversely, this is exactly the logging that you want to have in place in case of a breach.

You can then (factually) make the statement that ”we have no evidence any customer data was accessed.”