> “hacker took the records of at least three educators, decoded the HTML source code, and viewed the social security number of those specific educators.”

There's so much wrong here - am I to understand that if the state sends you SSNs in plaintext and you read them, _you're_ at fault?