States Seen As Lax on Database Security