"Despite the implementation of 46 state data loss disclosure laws, corporate execs still do not feel compelled to do the right thing. "Many companies believe that it is worth the risk of not reporting since reporting could mean a loss of consumer confidence in the brand," Toren says. "Until there is a federal law with real penalties for not reporting, these type of incidents are likely to continue."
Meanwhile, corporations would be wise to brace for a fresh wave cybercriminal activity that is likely to spin out of the Adobe breach, security experts say.
Now out in the Internet wild are personal and financial data for 2.9 million more individuals -- Adobe product users. Perhaps more worrisome, source code for Adobe Acrobat PDF reader and Adobe ColdFusion web app developer's tool has begun circulating.
http://www.usatoday.com/story/cybertruth/2013/10/04/how-the-adobe-hack-could-fuel-next-wave-of-cyberattacks/2923941/