Catch Of The Day waits 3 years to inform customers of breach | Hacker News Reader