AN ACT CONCERNING BREACHES OF SECURITY INVOLVING ELECTRONIC PERSONAL INFORMATION. To (1) provide that certain materials provided to the Attorney General following a breach of security involving electronic personal information shall be provided to the Attorney General in a form and manner prescribed by the Attorney General, (2) define "massive breach of security", (3) require a third-party forensic examination, analysis and report following a massive breach of security, and (4) impose an additional penalty for any person who fails to submit a third-party forensic report to the Attorney General following a massive breach of security.