Complaint here, in pdf.
Maryland enacted more gun laws recently, and so applications for permits surged. The State Police are supposed to process them, but have "farmed out" a large part of processing to employees of other agencies. The suit notes that Maryland has regulations regarding data security and sharing, which this violates, and the other personnel are not so well vetted as are State Police staffers. Further, it appears that the data is not encrypted and protection against hacking seems flimsy.