To clarify a few things:
"Based on our investigation to date, we have found no evidence that the malicious code transmitted users’ IP addresses or information about the websites they visited to an ...
"Adform has informed affected clients through dedicated communications and provided them with relevant information and recommended actions." <- this only happened after I went public with it.
1