I think the complaint was more of a way for the state to save face. Much like with the recent incident in the US where the governor asked the police to investigate a reporter that revealed the state website was embedding social security numbers in the application. Reporter was accused of hacking even though it was clearly an issue with the site.