Lawmakers say they are considering tougher penalties in cases where consumer information is hacked.