They don't do backups at those outfits?
More to the point, NONE of this data was deemed "sensitive" enough to warrant the most basic of background investigations?
(I'm assuming their former Federal-level hack resulted in a felony charge. When I say basic, I mean fucking basic.)
Should be direct hires with minimum SECRET clearances to access data like that. The fuck are they thinking. Starts with the contracting agency and goes from there. Anyone in .gov could run a simple criminal background investigation even if the contracting agency failed to.