Looks like they only found out about the breach when one of their disk failed last week.
I wonder how long their server were compromised with the key logger before they found out if not for the failed drive.
They said the 20th November. It's annoying to change everything but Ive learnt from it.