Yahoo breach: why does it take so long to tell people about a hack?

Delays in letting people know about data breaches can seem sinister, but there are usually good reasons