US regulator left sensitive information vulnerable to hacking, says Reuters