A successful attack against a widely used payment processing service has prompted state and local agencies to issue breach disclosures in recent days.