I remember a presentation at DEFCON some years ago on this topic. Most of the state death registration systems had virtually no security or verification at the time. It's probably a stretch to describe this as "hacking" when it was probably more akin to fraudulently filling out a couple of forms.