The breach was discovered on June 18 and the firm started notifying customers on July 6. However, the intrusion came to light only on July 21 when security researcher Dominic Alvieri came across a copy of the notification sent by Entrust to customers.

Entrust is a Minneapolis, MN-based company that provides security solutions for user and machine identities, payments, and digital infrastructure. The firm’s services are used across 150 countries, including by some of the world’s largest organizations.

In the notification to customers, Entrust CEO Todd Wilkinson said that while the investigation is ongoing, the company determined that some files had been taken from internal systems.