Is this not really bad practice in cyber security?

I've just started a new job as a cyber security PM for a large organisation. Literally first week on the job and I was on a call today getting details of my first project and it was mentioned that there had been two "significant cyber incidents" in the company before Christmas that had resulted in this project getting a priority boost.

Naturally I asked the other PM and the solution architect where I could find information on the incidents, mostly …

bad call christmas cyber cyber incidents cyber security cybersecurity incidents job large new job organisation practice project security the company today week