The federal Department of Veterans’ Affairs (DVA) managed an acute privacy failure after an unencrypted data reporting export accidentally exposed highly sensitive clinical medical treatment metrics of active and retired veterans to unauthorized channels.