Proxy statement shows little change after one of 2023’s biggest and costliest cyberattacks