“Often state laws on customer notification may compel companies to disclose [data] theft… . “But if you don’t have a legal obligation to disclose, why would you voluntarily disclose and put yourself in the crosshairs of that kind of litigation?” Mr. Meal said. “Companies think they are doing the right thing by disclosing but instead end up being viewed as the problem.”
This view (WSJ) seems remarkably short-sighted to me.