It's bad enough for companies to be hacked, but then they must face "the Frankenstein notification regime" involving every state, notes Luke Dembosky of law firm Debevoise & Plimpton. Sen. Mark Warner, D-Va., chairman of the Select Committee on Intelligence, is on record saying he doesn't "think our traditional reporting mechanisms necessarily work."