Do companies have to disclose DDoS attacks?

I'm doing a project for a tech/business class and we learned that companies have to disclose cyber attacks if its something like a data breach. I've looked around online and can't find anything about DDoS attacks. Do they have to disclose them at all or can they keep them private if they want to?

attacks breach business can class companies cyber cyber attacks cybersecurity data data breach ddos ddos attacks doing find private project tech