An investigation revealed that the company did not tell affected employees about the data breach for more than a year, a ...