Because of course your "internet-connected backup drive" doesn't need a password. Why would it, when you're only storing security clearance application information for US generals, passport and SSN data, userids and passwords, bits of trivia like that?
'The files, reviewed by ZDNet, contained a range of personal information, such as names and addresses, ranks, and Social Security numbers of more than 4,000 officers. Another file lists the security clearance levels of hundreds of other officers, some of whom possess "top secret" clearance, and access to sensitive compartmented information and codeword-level clearance.
Phone numbers and contact information of staff and their spouses, as well as other sensitive and private personal information, were found in several other spreadsheets.'
One can only hope the "obscurity" aspect of security kept this from being sucked dry by any number of parties. And also that the lieutenant colonel to whom the backup drive belongs doesn't have any longer-term aspirations for a military career.
US military leak exposes “holy grail” of security clearance files | ZDNet
Exclusive: These security clearance applications contain sensitive personal information, and are highly valuable to foreign adversaries seeking to undermine US national security.
