Illinois' systems leaked personal data throughout the year to identity thieves. Letters from the state asked victims to pay back what the scammers stole.