It was necessary to extend the period for legal prosecution purposes. I believe that the Act has been amended to this effect. Virtually all of the breaches that were discovered had taken place at a time such that we could no longer charge anyone.
On March 13th, 2008. See this statement in context.