The Real Crisis After a Data Breach: Legal, Not Tech