The time frame between the breach and the notice of affected individuals has some cyber experts concerned.