The crazy thing is how controversial that comment becomes. If you look at the new 8-K public companies must file to report cyber incidents; MGM just filed their press release-nothing more. But on HN if you look at the past threads people were acting scandalized about "how dare the g men require this oppression." It'll be a long drawn out process.

Absolutely, anything which decreases the bottom line is bad business.

Legislation is needed to protect the consumer here, there are no other incentives.