Re: Other reports are saying they became aware of this in January
You will find that it is not be that the Security Team being "lazy",
What you will find that the Management has chosen not to implement certain Security controls in for "Business Reasons" even though the Security Team has demanded it.
You will find that the Business will have a high turnover of Security Team as people join, try and do their best to secure the Business, then realise that the Management are not on board.