The list of financial institutions affected by the Heartland breach now includes those in more than 40 U.S states as well as , according to BankInfoSecurity.com.

The Heartland breach already has led to a class-action lawsuit against the company by law firm Chimicles & Tikellis LLP in Haverford, Pa. on behalf of a resident of Woodbury, Minn. and others who might have been affected by the data compromise.

In addition, the in Federal Way, Wash., is pushing state legislators there to revive legislation that would mandate specific data protection controls on all merchants and third parties that process payment card data. The bill received its first hearing before a committee in the Washington House of Representatives soon after the breach disclosure, according to a .