Ohio Inspector General Tom Charles says state officials failed to report the theft of a backup device containing sensitive state information quickly enough.
Charles also says the project manager of Ohio's massive new online financial system told an intern not to tell police the device contained stolen data.
The report out today says computer administrators failed to protect confidential information contained in the new online financial system.
Charles says this failure continued despite a warning from the state auditor in February that Social Security numbers were easily accessible.
The device holding hundreds of thousands of Social Security numbers was stolen from the intern's car in June.