It’s now months after the initial attack, but some participants and their families only found out this week their data may have been compromised, sending alarm bells ringing across the disability community.