Utah breach 10X worse than originally thought