A stolen state employee password allowed a hacker to breach the South Carolina tax system earlier this year. The hacker obtained the password when an employee of the Department of Revenue opened an e-mail containing malicious computer code on Aug. 13 [see complete timeline of the breach below]. The hacker also pilfered 3.3 million unencrypted bank account numbers and 5,000 expired credit card numbers. Gov. Nikki Haley blamed the breach on a combination of 1970s technology and IRS guidance that she said does not require the encryption of Social Security numbers.”]
Source: https://www.cuinfosecurity.com/stolen-password-led-to-south-carolina-tax-breach-a-5309