After a Breach, Attorneys General Expect . . .