The bigger issue here is the utter lack of communication from Mint. They deal with Serious Data™. If their organization don't recognize the need to communicate

The bigger issue here is the utter lack of communication from Mint. They deal with Serious Data™. If their organization don't recognize the need to communicate with their users about this, then what other risks do they not recognize?