The company said the attack started on August 1 but declined to comment to ZDNet about the timing of the recent disclosure.
Morley said the leak affected “current employees, former employees and various clients” and included Social Security numbers.