The agency responsible for protecting the country’s private information refuses to release details about a hack that took place under its own roof.