Is the Pentagon putting service members' sensitive data at risk?