Nearly a month ago, library leaders say their system was hit by a cyberattack. However, they waited more than three weeks to let people know.