Rash of data breaches forcing agencies to rethink how they verify employees identities