The Securities and Exchange Commission is now saying that at least two people had their personal information stolen in the breach that happened last year.
An earlier breach adds even more scrutiny as the company deals with the aftermath of a security failure that exposed the information of 143 million Americans.