While intruders routinely breach the security fences protecting runways and planes at U.S. airports, the federal Transportation Security Administration is not keeping up with the threat or doing enough to help airports identify their vulnerabilities, according to a government report.

Congress asked the U.S. Government Accountability Office to investigate how often people get past airport perimeter security, and whether the TSA could do more to help airports anticipate and prevent incidents.

Using TSA data, the accountability office identified over 2,500 security incidents in each of the past three years at the nation’s roughly 440 commercial airports. Those incidents ranged from people jumping fences to reach jets and passenger terminals to workers who forgot their security badges piggy-backing with a colleague through checkpoints.

The report released Tuesday notes that the nation’s medium and small airports, which typically have less money to invest in perimeter security, have plenty of incidents — but do not undergo the “joint vulnerability assessments” that large airports receive every three years from the TSA and FBI.

The findings come several days after The Associated Press updated its ongoing investigation of perimeter security breaches at 31 of the nation’s busiest airports.