“the attacker likely had access to the system since mid-October.”
Nitori caught the intruder on November 6. The attacker had been inside since mid-October. Names, addresses, phone numbers and birth dates for up to 37.62 million records walked out the door. Nitori leads with the passwords and card numbers that weren’t taken, as if you can reset a birth date.