FTC warns app makers fall under breach notification rule

The agency noted that a breach must be reported regardless of whether it was the result of malicious action. Any unauthorized access, including sharing information without consent, would trigger the rule.