Massachusetts has reminded Hannaford Bros. that a law passed after last year’s data theft at TJX Companies requires the grocery chain to formally notify the state of any security breaches. The chain disclosed on Monday that its system was hacked, potentially exposing over four million credit and debit cards to fraud.