State lawmakers grilled aides to state Auditor Pat McCarthy at a hearing Thursday, questioning the auditor’s actions related to a massive data breach affecting 1.3 million Washingtonians.

The questions and criticism zeroed in on whether McCarthy’s office should have disclosed the breach of a third-party file-hosting vendor sooner, and whether the auditor should have amassed so much personal data — including Social Security and bank-account numbers — that may now be in the hands of cybercriminals.