The agency stopped redacting personally identifiable information in claims requested under the Privacy Act, even though officials knew the policy could leave millions of people vulnerable to identity theft.
Article Link: https://www.nextgov.com/cybersecurity/2019/11/va-released-millions-peoples-personal-data-despite-known-risks/161375/