How do they know??

[mailing at vankets.com (Bert Van Kets)]

I was just reading the story on the Wal-Mart attack in Wired :
http://www.wired.com/threatlevel/2009/10/walmart-hack/

In the story they claim "no sensitive customer data was stolen". How can
they be so sure?
The story tells that the attacker got Admin privs, so access to all user
accounts and passwords. IMHO they can encrypt all they want. It's game over.

How can they make a claim that no sensitive data was stolen?

Bert