– New Yorker – American companies that fall victim to data breaches want to retaliate against the culprits. But can they do so without breaking the law?