It's weird how, despite the feds being the ones who push security requirements onto the states, the states often have better security in place than the people making the rules...wtf
First of all, I'm not buying that states have better security. But, most of all I'd say that the US government have much larger networks with much more important data. Which is what the hackers want.