Cybersecurity experts have questioned why Partnered Health took more than three weeks to reveal it had been the victim of a data breach.