US Justice Department investigating the breach