SALEM, Ore. (AP) – The Oregon Department of Human Services says that a data breach may have exposed the personal information of the 1.6 million residents the department serves.

The department said on Thursday it isn’t sure exactly how many people had their information exposed after nearly 2 million employee emails were made vulnerable to unauthorized persons. Those emails could have contained sensitive client information, including full names and Social Security numbers.

The breach occurred in January after nine employees opened a phishing link that compromised their email boxes.

DHS says it hired an outside investigator to uncover how many records were impacted and how the information was used. Individuals whose information was exposed will be notified.

DHS manages a number of welfare agencies in the state.

A toll-free number has been set up by IDExperts, who have been hired by DHS to review and clarify the amount and identities of Oregonians exposed. That number is 1-800-792-1750 and it goes live on Friday.

More about: