A security researcher found a Florida Department of Revenue website was exposing taxpayers' sensitive personal data.