If it's performance related, that's all that you should state. Defining and qualifying "much" is difficult.
It's probably not best to tell the public that inappropriate interview questions have been being asked ~for a while~.
This response stinks of a small company that could have definitely benefited from using a PR statement instead of a posting from the CEO.