> a social engineering breach, which could involve pulling personal information from social media and using it to determine passwords.<p>I don't understand how relatively low risk, high access-demand systems, like common terminals in a hospital nurse's station, require CAC access yet high security data, low access-demand systems, like personnel records, are apparently accessible with a little Facebook snooping.