When a data breach occurs, the organization is responsible for notifying individuals; however, this doesn’t mean companies will notify victims in every instance of a leak. There are no federal regulations overseeing these breach notifications. Unless the breach involves individuals from specific states with compliance regulations (like Maine or Texas), there is always a chance that the organization doesn’t notify the victims following the exposure of their data.