Approximately 18 million Americans reportedly had their personal records compromised when hackers attacked the Office of Personnel Management’s databases last year.

That number is exponentially bigger than the 4.2 million OPM first acknowledged earlier this month, and far more than the “up to 14 million” figure that began circulating after OPM acknowledged a second attack reached the sensitive information of not just current and former federal employees, but also of some people who simply applied to work for the federal government.