No effect seen in hack disclosure law