> If the corporation was hacked and kept it on the DL, but boosted security posture in response, is that a bad thing?

A public corporation has a legal and fiduciary duty to its owners other than hiding what happened.