Every state in the U.S. has a data breach notification requirement to notify consumers of a breach. But notification rules alone don’t require organizations to detail how they got breached. Many notifications include scant details about what happened. For businesses that procure software or services from others, data breach transparency shortfalls mean they might never know if a software or other service provider suffered a hack attack that might, by extension, have put all of its customers at risk. In Europe, even in Europe, the data breach isn’t always clear.”]

