According to another former agent, there is widespread shock that such a breach could happen at one of the world's best-resourced law enforcement agencies.

"You would think this information would not be internet-exposed. It's disturbing, actually," he says.

Maybe it's time to start passing laws a la HIPAA that crank up handling standards for certain classes of data.