Key to this is that it was a subcontractor that was storing sensitive gov't data on their own servers—which they weren't supposed to be doing.
@maxeddy nothing like some good fashioned shoddy practices.
And this right here is the ultimate argument against "If you have nothing to hide..."
If someone trusts an abstract concept like "The Government", they are by extension trusting every human being who may be a part of "The Government, now and in the future, as well as anybody else any of those people outsource work to.
A Mastodon instance for info/cyber security-minded people.