. . . "Passwords and other information could have been compromised in the attacks, which began in July but were not reported to security authorities until the end of August, the Asahi Shimbun said, without citing sources." .