All states now have tax data breach notification laws