September data breach disclosed.