This is it.
There need to be state specific taxpayer identification numbers that have nothing to do with Federal social security numbers, except deep in the well guarded bowels of the revenue departments. Probably some contractor’s PC got snatched, if it’s like a lot of these past breaches.
I did some sub-contracting for DOR a couple of years back for a few weeks.
They had an insane and barely workable data migration procedure for their systems. The routine was 4 pages long and under no circumstances could you write down any passwords. Saving them on phones was OK.
There were 6 or so MIS types plus the supervisor who was basically ok. 4 of the others were first rate jerks. Two others were actually normal people who wouldn’t go bananas if one said hello to them.