They're about to be up !*@^ creek with this one, as it took 1.5 months from the discovery date for them to notify anyone. Says here letters were dated for yesterday to send out. That's unacceptably slow, and horrible mitigation procedures. Not to mention they haven't said anything publicly.
Let the spotlight shine on this.