OPM (finally) notifies people affected by breach

My notification letter arrived on November 23, 137 days after the public announcement and approximately 200 days after OPM says it discovered the incident.

What’s the harm in inaccurate personal information?

What’s unfortunate about this case is that it in no way addresses very real questions about responsibility for the establishment and maintenance of data integrity.