Apology wording
They said “We would like to apologize for the concern we have caused" - this sounds like they're apologising for causing concern, not for the data breach itself. It implies that o2 don't think people should have been concerned. Like they're apologising for not having educated their user base better about this sort of thing, and had the user base been better educated they never would have been concerned about this type of technical error.