The window between disclosure and exploitation is shortest exactly where the ability to respond is slowest.
An organisation appears on the list because it did not pay, or paid late. An organisation absent from the list may have paid.