The FTC Safeguards Rule requires dealerships and other financial institutions to notify the agency after it discovers a security breach involving the information of at least 500 customers.