The Securities and Exchange Commission is now saying that at least two people had their personal information stolen in the breach that happened last year.

The SEC disclosed on September 20 that hackers last year broke into its system that allows companies to digitally upload their documents, commonly known as EDGAR. Originally the SEC believed that no individuals’ information was stolen, but an investigation after the original disclosure found that not to be the case.

The two people impacted had their birthdates, Social Security numbers and full names accessed. The SEC says it will be providing the two people with identity protection.

(AP)