As data hijackers continue to target local governments and hospitals, legislators remain stymied over how best to address the problem.