A Pentagon file-sharing vulnerability exposed 3M+ records for nine months. The breach highlights how even well-resourced agencies fail at the basics.