"Why, in my mind, does this translate into 'all of our customer's data has been compromised'?"
Because you give TalkTalk too credit. It really means "we have no idea which of our customers' data has been compromised. It could well be all data for all customers, but we don't know, and never will"