KDDI's vague disclosures about a massive data breach hint at deeper issues in cybersecurity transparency.