Millions of people in Louisiana and Oregon have had their data compromised in the sprawling cyberattackthat has also hit the US federal government, state agencies said late Thursday, writes Sean Lyngaas.