Massive data breach that includes Social Security numbers may be even worse than suspected