So they had been breached for over a year and didn't even know And even when told they had a breach, they decided to leave it another month before informing the people involved If company's are expecting everything to be based in the cloud in the future they are really going to have to get their act together before i trust my data to them.