Experts say the detection delay of 17 months is a colossal security blunder by the retailer. 
Threatpost