data breach crypto regulation