They may be collaborating with the European, Russian, Japanese space agencies. They have researchers traveling the world at any given time. That said they cert

They may be collaborating with the European, Russian, Japanese space agencies. They have researchers traveling the world at any given time. That said they certainly could restrict more access. It's a big challenge because NASA is ultimately a research facility where freedoms of researchers have to be carefully balanced with security and access control. Each department and project has its own needs so it has a very varied attack surface. It's not as simple as simply putting a giant international firewall up. And they do have strict restrictions in place but it takes a single project, or sysadmin to drop the ball causing this sort of embarrassing situation. Clearly it needs to be even more effective.