Most recent data breaches involve customer information such as user names and passwords, credit card numbers, and medical histories. The companies hacked are hurt — they have to contact victims, pay for credit monitoring services and fines. The potential for damages is much larger than in leaks of personally identifiable data. The need for action is urgent, as both the hacking tools and the leak channels increase in sophistication, experts say. And while some companies take a hard-line stance, others will consider the price a drop in the bucket and pay up.”]