The head of OPM testifies that at least 18 million SSNs may bave been held in one of the breached OPM systems.

Link to article (subscription required).