What’s an employer’s responsibility to provide notification of a data security breach?

Q. We maintain employee personnel information in an HR software program. We have discovered that a former employee hacked into the database and copied 100 employees’ first and last names, addresses, Social Security numbers and driver’s license numbers. Do we have to notify the employees? Some of them live and work in Ohio ...