The breach occurred in Dec '22 and wasn't discovered until August '23. It included all sorts of personal and bank information according to the article which is really pathetic.
These companies don't give a shit about protecting their employees and customers data and there needs to be stiff penalties.