The Defense Manpower Data Center left unencrypted records open to intruders for nine months.
The US firearms bureau says intruders hit a standalone system tied to its investigations.