Lawmakers say existing solutions lull data breach victims into a false sense of security