Hackers swipe card numbers from local government payment portals