Financial institutions ordered to notify customers after a breach, have an incident response plan

The Securities and Exchange Commission has announced rules around breaches for certain financial institutions.