Hacker hits Georgia state database via hole in security software