The problem was discovered in January, but the company said it made a fix and will be notifying all affected users.