Comment by throwaway8eor

I think this would have a negative effect.

Getting a company to publicly announce a breach is hard today. Your suggestion would make it even harder, and more data breaches would be kept from the public because of the consequences.

I would rather know that a company messed up and change my password, than not knowing