1. Short title This Act may be cited as the Cyber Breach Notification Act of 2017 . 2. Notification of information security breach (a) Notification required (1) By covered entity A covered entity that collects, uses, accesses, transmits, stores, or disposes of unsecured sensitive personally identifiable information in electronic or digital form shall, in the case of a breach of such information that is discovered by the covered entity, notify— (A) appropriate Federal agencies; (B) each individual whose unsecured sensitive personally identifiable information has been, or is reasonably believed by the covered entity to have been, accessed, acquired, or disclosed as a result of such breach; (C) the attorney general of each State in which an individual described in subparagraph (B) resides