On the basis that the grander the announcement, the greater the motivation to break it, I reckon about 20 minutes.

It likely comes pre-compromised. See other discussion on Kaspersky's "dodgy history".