The Office of Inspector General observed that contracts with three vendors don’t adequately protect massive troves of data ...