Federal agencies that put valuable personal information at risk are doing too little to address the problem, according to the U.S. Government Accountability Office.

Eight federal agencies have the means to deal with “data breaches,” in which personally identifiable information is taken, yet fail to consistently use them.