Is Strict Liability Next for a Purposeful Data Breach?