Most of the 25,000 Afghans whose details were in the leaked database were not notified until this month