; (3) the term security breach means a compromise of the security, confidentiality, or integrity of computerized data that there is reason to believe has resulted in improper access to sensitive personally identifiable information; and (4) the term improper access means access without authorization or in excess of authorization. . (b) Clerical amendment The table of sections at the beginning of chapter 47 of title 18, United States Code, is amended by adding at the end the following: 1041. Concealment of security breaches involving personally identifiable information. . (c) Obligation To report (1) In general A person who owns or possesses data in electronic form containing a means of identification and has knowledge of a major security breach of the system containing such data maintained by such person, must provide prompt notice of such breach to the United States Secret Service or Federal Bureau of Investigation. (2) Publication of list of notifications The Secret Service and the Federal Bureau of Investigation shall annually publish in the Federal Register a list of all notifications submitted the previous calendar year and the identity of each entity with respect to which the major security breach occurred. (3) Definition In this subsection— (A) the term major security breach means any security breach involving— (i) means of identification pertaining to 10,000 or more individuals is, or is reasonably believed to have been acquired; (ii) databases owned by the Federal Government; or (iii) means of identification of Federal Government employees or contractors involved in national security matters or law enforcement