The theft of personal names, birth dates, social security numbers and addresses may have been a state-sponsored crime, according to the Department of Justice.