They did, as per rules, 120 days later. The issue is of course the lack of information, and the pretense that this is for “security reasons”.