Medicaid data breach far worse than originally reported