Breach-disclosure laws that have been adopted by many states can be leveraged by data thieves for even more profit than they could realize before. When a companys executives decide to hide a breach, their action can morph from unsavory to illegal. This decision can leave them vulnerable to the attackers behind the breach in the first place, who know that the company has not done what the law requires and can now threaten it with disclosure. The decision to report a breach is not black and white, it’s not white and it’s easy to see why companies can end up saying, All right, let’s let others do what they do,”]

