Per an AP story I saw on Yahoo, the State of Ohio has hired Matthew Curtin of Interhack to assess the likelihood of a third-party accessing the data that was stolen.
I don't know Matt personally, but I've heard him speak a couple of times, and it gives me comfort to know that he's working on this. Matt clearly knows what he's doing, and I have the highest respect for him. I'm waiting anxiously to hear what comes of this...