It's pretty common for the government to do this sort of thing --

http://www.cnn.com/2009/POLITICS/01/27/va.data.theft/ 600+

http://thehill.com/policy/technology/97817-va-loses-another-... 26.5 million veterans/active

The funniest part of all of this is that the non veterans here seem to be surprised by this.