well, they have to be transparent, because they're worried that hackers might leak it. so it's just a preemptive move.
The Malwarebytes was, not sure about this EMSISOFT. Either way, fortunately, both were very minor as the EMSISOFT only affected a handful of company email accounts (not individual consumers) and the Malwarebytes only affected a "limited" number (don't know what that means) of "internal company emails". So again, not individual customer accounts.
Fabian Wosar commented over here: https://malwaretips.com/threads/emsisoft-data-breach-incident-report.106620/#post-928682
Well, I personally don't know why he didn't post here either, he used to, a lot. So, one can speculate but that can be unpleasant. It was good to see him posting somewhere at least. I haven't seen him in the past months, not even on Twitter.