The latest widescale cyberattack led Sen. Charles Schumer (D-N.Y.) to urge Congress to draft a cybersecurity bill and prioritize the development of universal data breach notification standards.

Excellus BlueCross BlueShield last month announced the data breach that compromised the personal information of about 10 million people.

Citing the Anthem hack in February that affected 80 milllion records and the UCLA Health Systems in July which potentially affected 4.5 million people, Schumer said strengthening cyber protections is necessary. He noted that just last year, one-third of New York residents were victims of a data breach.

The Cybersecurity Information Sharing Act of 2015 (CISA, S. 754) would allow the sharing of internet traffic information between the government and technology and manufacturing companies. The bill was first introduced in the Senate in July 2014, but has not yet been considered or voted upon by the full Senate. 

Schumer said the fact that it took 19 months to discover the Excellus breach “just goes to show how sophisticated online hackers are and how much work we have to do when it comes to protecting our personal information. I am urging my colleagues in Congress to strengthen consumer cyber protections and require companies to notify their customers if there has been a breach of their personal information in a timely matter so they can take action to ensure they are not the victim of identity theft. In addition, we need intelligence and law enforcement agencies to work together to share information of potential cyber threats to prevent another attack.”

Schumer has a long history of advocating for increased cyber security, most recently urging the Commerce Department to rewrite a proposed rule that would limit private companies from usingsoftware to test the strength of their networks. He said preventing companies from testing their networks would leave them exposed to a potential attack. As a result, the Commerce Department rewrote the rule in consultation with cybersecurity experts to ensure companies would be able to use software to test the security of their networks.