The Republican Governors Association letter also notes that the investigation into the breach remains open and it’s not clear what specific data may have been exposed or stolen during the attack.