The server included military and civilian personal information, but officials say the malware used doesn't typically compromise data.