Virginia agencies have “generally inadequate” programs in place to protect data files, according to a report released this month from a state auditor.

After a broad review of information security programs, the Auditor of Public Accounts found 66 state agencies and institutions were lacking, and 17 had no program in place at all. Only 21 ranked as “adequate.”