Staff at the Department of Veterans Affairs were able to access sensitive information and communications, including veterans’ personally identifiable information.