The director of the state Revenue Department says his agency did not have a computer security officer for nearly a year before a hacker stole the personal data of millions of taxpayers.