Theres lots of corporate ass covering and lawyer consulting that must occur before they send the warnings.
Its not like one guy in the IT department figures out there was data theft and then immediately sends an email. Come on. That guy makes calls, takes lunch, meets with his supervisor, who cries, then calls a meeting with HIS supervisors, who freak out and call the lawyers, who take some time to draft the details.
The fact you know anything at all at this juncture is surprising to me.
Its not like one guy in the IT department figures out there was data theft and then immediately sends an email. Come on. That guy makes calls, takes lunch, meets with his supervisor, who cries, then calls a meeting with HIS supervisors, who freak out and call the lawyers, who take some time to draft the details.
The fact you know anything at all at this juncture is surprising to me.