Agency delayed reporting theft of veterans’ data