Breach response times and volumes decreased significantly last year, but overall numbers still look ugly.