The agency admits failure in preventing unauthorized disclosures by contractor Charles Littlejohn, vows improvements in data security.
