The U.S. Department of Veterans Affairs failed to understand the significance of the data breach in early May and responded with “indifference and little sense of urgency” A report released on Tuesday from Inspector General George Opfer found that while the analyst was authorized to access and use the database, he did not have permission to take the information home, and he failed to encrypt it or protect it with a password. The analysts supervisors told inspectors they were not even aware that he was working on the project, but said if they had known, they would not have let him take the data home.”]
Source: https://www.csoonline.com/article/2120193/report–va-responded-to-data-theft-with-indifference.html