Attorneys general from several states including Connecticut, Massachusetts and New York have asked the company to provide more information about the cyber attack, in which hackers stole data from as many as 40 million credit and debit cards of shoppers who visited Target stores during the first three weeks of the holiday shopping season.