The accessed data at Equifax are SSNs, DOB and address. Why should the state hack a company to access data they already have? After all, SSN is state-issued and addresses at Equifax will be known to at least one agency (probably IRS).
That's a good question. My reply would be I'm not sure the intelligence community / legal profession can collect and hoard such things without legal approval.
Certainly Equifax has other data. Maybe they didn't get what they wanted? Maybe Equifax isn't being transparent? Maybe they don't know?