South Carolina’s Department of Revenue stored 3.3 million bank account numbers, Social Security numbers in unencrypted format. A single state employee clicked on a malicious email link, an attacker — unnamed Russian hackers — was able to obtain copies of those records. The state has urged anyone who has filed a tax return in South Carolina since 1998 to contact law enforcement officials. Gov. Nikki Haley has written a letter to the IRS recommending that it begin requiring that Social Security Numbers get encrypted. The U.S. Secret Service has traced the stolen information back to state tax returns.”]
Source: https://www.darkreading.com/attacks-breaches/s-c-security-blunders-show-why-states-get-hacked