So safe to say they knew about the data breach a full month and a half in advance, given they ISSUED the updated to terms in April. Meaning either early April or March they were hacked.
They only told the public on the 14th May but wanted all their ducks in a row so they couldn't get sued to shit.

