Holder Says Congress Should Require Companies to Disclose Data Breaches