
12 months from now or 12 months from then?
Victims of the breach have been offered 12 months of credit monitoring.
It was first detected 12 months ago, so the credit monitoring should have started 12 months ago. I'm fairly sure that didn't happen and they are offering monitoring for just the second year that the data was known to be available for misuse.