That is in addition to a separate hack –also last year-of OPM’s personnel database that affected 4.2 million people. That number was previously announced.

Together, the breaches arguably comprise the most consequential cyber intrusion in U.S. government history. Administration officials have privately said were traced to the Chinese government and appear to be for traditional espionage.

The 21.5 million figure includes 19.7 million individuals who applied for a background investigation, and 1.8 million non-applicants, predominantly spouses or people who live with the applicants. Some records also include findings from interviews conducted by background investigators, and about 1.1 million include fingerprints, officials said.

Individuals who underwent a background investigation through OPM in 2000 or afterwards are “highly likely” affected, officials said. Prior to 2000, it is possible but less likely, they said.