The regulations definition of "a reasonable time" is usually 24 hours...unless prior to a holiday or weekend. Though I believe this only applies if non-intential disclosure has occurred.
Otherwise, they would appear to be playing with fire sitting on known pertinent information for any extended period of time.