; (2) the breach of security involves a database, networked or integrated databases, or other data system containing the personally identifiable information of more than 1,000,000 individuals; (3) the breach of security involves databases owned by the Federal Government; or (4) the breach of security involves primarily personally identifiable information of individuals known to the covered entity to be employees or contractors of the Federal Government involved in national security or law enforcement. (c) Content of notices (1) In general Each notice under subsection (b) shall contain the following: (A) The date, estimated date, or estimated date range of the breach of security. (B) A description of the nature of the breach of security. (C) A description of each type of personally identifiable information that was or is reasonably believed to have been acquired or accessed as a result of the breach of security. (D) A statement of each paragraph under subsection (b) that applies to the breach of security. (2) Construction Nothing in this section shall be construed to require a covered entity to reveal specific or identifying information about an individual as part of the notice under paragraph (1). (d) Notice by designated entity The designated entity shall promptly provide each notice it receives under subsection (b) to the following: (1) The United States Secret Service. (2) The Federal Bureau of Investigation. (3) The Commission. (4) The United States Postal Inspection Service, if the breach of security involves mail fraud. (5) The attorney general of each State affected by the breach of security. (6) Such other Federal agencies as the designated entity considers appropriate for law enforcement, national security, or data security purposes. (e) Timing of notices Notice under this section shall be delivered as follows: (1) Notice under subsection (b) shall be delivered as promptly as possible, but— (A) not less than 3 business days before notification to an individual section 142(a)(1)