Cybersecurity weaknesses still leave United States Postal Service employees vulnerable to identity theft, even after a data breach last September resulted in the theft of more than 800,000 workers’ personal information.

Employees can expose sensitive information, accidentally or intentionally, because they have unnecessary digital access to off-limits areas, according to a Postal Service inspector general report released Monday. Also, the Postal Service doesn’t consistently test some components of its cybersecurity.