The University of Minnesota was subject to a data breach and allegedly did not inform the affected parties for more than a month after learning of the breach.
