The custom T-shirt and merchandise company, CafePress, had its systems hacked and personal details stolen. CafePress did not notify users until several months after the breach took place and a full month and a half after forcing users to change their passwords.