Because of the way this attack worked. Whole database backups were copied, rather than particular records being opened one at a time, so there is no list showing who was affected and who was not.
We have asked Beacon for more specific answers about exactly which data was involved, and we are continuing to press them on it. If we learn anything that changes what we have told you, we will say so on this page and contact people directly where we need to.