The company wrote that it first learned of the incident in April, but the U.S. Justice Department determined in May and again in June that “a delay in providing public disclosure was warranted” until now.
Either way, we deserve a full answer on that delay
It actually seems like it was three months. From a different article
Either way, we deserve a full answer on that delay