The personal data of more than eight million people was accessed in the cyber attack