George Waller was interviewed awhile back (sorry I don’t recall the date); and, he explicitly stated something I suspected for the past 3 years or so, since thinking about such matters: One of the key tenets of providing cyber-security is keeping it quiet as to who and what type of cyber-defense strategy you employ.
So, it seems we really do have to just wait for the numbers, for the most part.