About 8,500 notification letters were sent out after an unauthorized third party gained access to Metropolitan Companies computer systems and removed documents containing personal data.
Lawmakers back the spirit of the Privacy Alerts Bill 2014, which carries hefty fines for delinquent organizations, but called for further clarification.
An investigation into a Rady Children's Hospital breach involving more than 14,000 patients revealed a separate incident involving more than 6,000 patients.
Credit card data of a projected seven million-plus customers of P.F. Chang's Chinese Bistro was reportedly exposed for nine months beginning in September 2013.
Fast Five
Selected by the SC Media Editorial team every Tuesday.
Sign up now for the top five issues cybersecurity pros need to know this week.