Consider Target or Equifax, when they get hacked they are court ordered to notify their customers. Does someone want to maintain a list of customers for every p

Consider Target or Equifax, when they get hacked they are court ordered to notify their customers. Does someone want to maintain a list of customers for every piece of hardware for connected in case something goes awry?