The US needs a law that requires companies to disclose data breaches quickly, cybersecurity experts say (Washington Post)