; and (7) the toll-free contact telephone numbers and addresses for the major credit reporting agencies if the sensitive personally identifiable information that was breached could be used to commit financial fraud or identity theft. (b) Direct business relationship Regardless of whether a covered entity or a designated third party provides the notice required pursuant to section 211(b), such notice shall include the name of the covered entity that has the most direct relationship with the individual being notified. 215. Coordination of notification with credit reporting agencies If a covered entity is required to provide notification to more than 5,000 individuals under section 211(a) and the sensitive personally identifiable information that was breached could be used to commit financial fraud or identity theft, the covered entity shall also notify all consumer reporting agencies that compile and maintain files on consumers on a nationwide basis (as defined in section 603(p) of the Fair Credit Reporting Act ( 15 U.S.C. 1681a(p) )) of the timing and distribution of the notices. Such notice shall be given to the consumer credit reporting agencies without unreasonable delay and, if it will not delay notice to the affected individuals, prior to the distribution of notices to the affected individuals. 216. Notice to the Federal Trade Commission (a) In general A covered entity required to provide notification under section 211(a) shall provide a copy of the notification to the Federal Trade Commission not later than the date on which notice is provided to individuals required to be notified. The Federal Trade Commission shall establish procedures to ensure the attorneys general of each State with affected residents receives a copy of the notice provided to it under this section. (b) Public database and report to Congress The Federal Trade Commission shall— (1) maintain a public database on the website of the Federal Trade Commission of notifications received under subsection (a)