The OPM hack widens