Read the damning dossier on the security stupidity that let China ransack OPM's systems • The Register

http://www.theregister.co.uk/2016/09/08/opm_hacking_report/