Concealing security breaches where personal consumer information may have been swiped could carry prison time under a pair of proposals that were reintroduced in Congress.