Legislation Would Make Retailers Liable for Damages From Hacking