‘Incredibly sensitive’ data is open to cyberattack at Mass. tax-collection agency, audit report says