Hyatt customers are being encouraged to check whether or not they stayed on one of the Hyatt hotels hit by malware last year. Given that it is almost 6 months since the breach occurred, should there be a change in how companies disclose breaches?