On the recordApril 21, 2015
I rise to speak about two bipartisan bills that would help to modernize the way this country approaches cyber security. Congress needs to get with the times and realize that the Internet is no longer a new concept. Swiping a credit card, conducting online banking, storing prescription records online--these are not new activities. The cloud is no longer new. Hackers are no longer new. So why are we still so taken aback, in shock, every time we suffer another major cyber attack? Why are we still not requiring that consumers be notified when their information has been stolen? Why aren't we unleashing law enforcement to go after cyber criminals? If we want to defend against 21st-century threats, then we have to bring our laws into the 21st century. We have to get out of the mindset that the only way we can be hurt is from an actual physical attack. Hackers don't operate on battlefields; they operate in basements and in cubicles. Our approach to cyber security so far has been certifiably wrong. We have the largest defense budget in the world by far, but that hasn't stopped our hospitals and banks from falling victim to a near constant barrage of attacks. Last year, data breaches in this country hit a record high; they were up more than 27 percent from the year before. In New York State, between 2006 and 2013, we had nearly 5,000 individual data breaches that were reported by businesses, not-for-profits, and government entities.…





