IRS breach shows the importance of PII security