Wow, the state messed up pretty badly but it could have been even worse if patient data was involved, that means there's a HIPAA violation, which means the fed gets involved. This is why good IT security people are worth their weight in gold, they keep blunders like this from happening.