At least eight agencies are at risk for major data breach