Disclosed News Corp security breach lasted two years
arstechnica.com