An investigation finds eight federal agencies failed to implement baseline cybersecurity practices, leaving Americans’ data vulnerable.