How long ago was this known?
I think it was since September last year there was a breach in their service but they didn't report it until just now.
I hate when those companies hide these things when they actually do happen because they are thinking they are somehow doing "Damage control" but actually making it much much worst for them not notifying the public of these customer information have been comprised type of scenarios.