; (ii) the approximate date on which the covered breach occurred; and (iii) with respect to the covered breach— (I) the number of affected consumers; (II) the measures that the covered consumer reporting agency is taking to remedy the covered breach; and (III) the potential risks created by the covered breach, a list of which the covered consumer reporting agency shall develop in consultation with the Office. (3) Delay of notification authorized for law enforcement or national security purposes (A) Notification by law enforcement agency or intelligence agency If a Federal law enforcement agency or intelligence agency to which the Commission has provided notice under paragraph (1)(B)(i) determines that the notification required under paragraph (2) may impede a criminal investigation or national security activity— (i) the Federal law enforcement agency or intelligence agency shall provide written notice to the Commission and the covered consumer reporting agency that was subject to the covered breach that is the subject of the notification that states— (I) that the notification required under paragraph (2) shall be delayed for law enforcement or national security purposes; and (II) the date on which the delay imposed under subclause (I) shall end