It's entirely possible and it's still so early that we're still guessing. But so far some companies have come out to say that they've seen exploitation only as

It's entirely possible and it's still so early that we're still guessing. But so far some companies have come out to say that they've seen exploitation only as early as a few weeks ago. Companies likely only started IR in the last week. Breach notifications, which only a minority of companies will bother to send out, will be a few weeks away at the earliest.