I agree with the coat of paint comment but if we have learned anything about government agencies or large corporations being hacked in the past it is that their Internet security practices can sometimes be painfully bad.
@Below and HBGary was a IT security firm after all...
The CIA should be relatively secure: they are an intelligence agency, after all. Breaching a intelligence agency's website will cause the agency to lose more face than a Senator does after his or her website is hacked.
@Below and HBGary was a IT security firm after all...