That's been happening for years all the way up to and including the government chain. Hence OPM Breach
Sad but likely true. Also, probably at least a third of employees would refer to themselves as "computer illiterate" so anyone expecting them to know what cybersecurity even is will be terribly disappointed.
Keeping my letter just in case in the future some relative compensation can be had although not holding my breath on that. BUT if they can't even protect Government Clearances then they just as well invite the world to a free-for-all in peering into those records and (former) employees.