So basically someone (who was probably getting paid by the DoD) scp'ed some info to a server he/she wasn't suppose to.

This more like a breach of standards. At least they know where the data went. The OPM breach is far worse.