The department was notified December 8 by third-party software provider BeyondTrust that a hacker had gained access through a tech support service.