The number of individuals confirmed to be affected by the data breach is almost double the company's previous estimate.