But what the CIO did not disclose at the time was the scope of the breach: nearly one million emails and phone numbers had ...