Industry cyber experts say the unnamed agency failed to secure their networks with basic cyber hygiene steps and ended up becoming the latest victim of a sophisticated cyber attack.