Perhaps the worst part is that they either didn't know about the breach (likely), or didn't tell anyone (hopefully not).