Within two weeks of each other, two separate states have announced data security incidents.