The case illustrates that the government agency could be doing a better job safeguarding tax payer data.
