Data security breach expands to 657K SC businesses; suit filed against state