I'm pretty sure their timeline of the breach is also not correct. I think information about my account was exposed over a month ago.