&gt; a social engineering breach, which could involve pulling personal information from social media and using it to determine passwords.<p>I don&#x27;t understand how relatively low risk, high access-demand systems, like common terminals in a hospital nurse&#x27;s station, require CAC access yet high security data, low access-demand systems, like personnel records, are apparently accessible with a little Facebook snooping.