Questions around the gap between the attack and its publication three months later have been circulating in the public domain and online