Taxpayers may be paying the price for a data breach.