Hackers who breached US government databases stole personal information of 21.5 million people, officials said Thursday following an investigation into the attack widely blamed on China.

An update from the government's Office of Personnel Management said those affected included 19.7 million who underwent a background investigation, and 1.8 million others, mostly spouses or cohabitants of applicants.