And wait until the administration decides to sue the person who reported the breach to them.