The security breach that led to millions of Last.fm passwords being compromised happened at least three months ago — and remained undetected, despite the fact that the company suspected in May that it had been targeted. On Thursday, the CBS-owned (s CBS), London-based music website became the latest website — after LinkedIn (s LNKD) and eHarmony — to reveal that its data had been stolen, asking us