My wife got a notice the other day that he data may have been compromised - from a LLC that “provides services” to a local hospital. They say the attack occurred over 2 years ago and they’re just now getting to notifying folks... they need to be jailed...
2 years happens to be the common time period when a statute of limitations runs out.