It has to be 18 months after public disclosure before the company has to send out a letter letting them know that someone might use their information, and they

It has to be 18 months after public disclosure before the company has to send out a letter letting them know that someone might use their information, and they are eligible for yet another free credit monitoring service...... /S