Company sues state over alleged security breach