Bill would require customer notification of hacks