You don't know there is lack of security. The article you link provided no real details or sources cited. You dont even know they procedures of the audit...
The head of the Cyber Ninjas had admitted that fact multiple times. He also acknowledged in that article there was no security provided for the data that was moved to Montana. Finally the transparency he promised has not materialized. There has been enough evidence that they’ve admitted to that shows personal information is not secured.
You made the claim. Burden is on you. If you can’t back up your claims then it’s as good as fake news.