This is what civil courts are for, there’s no need at all for a new law. A general frustration that’s pretty common in internet communities is how regulators and legislators deem it necessary to create so many new laws just for the internet. We expect that the 4th amendment should apply to our packets just as it does our mail, and houses, and persons. So I can’t help but see hypocrisy whenever I hear demands that companies should be financially or criminally punished after being a victim of a cyber crime. If there’s a legitimate tort, then you already have legal recourse.