Your timeline is off... most organizations were exploited long before the patch went out.