National Public Data says “only” 1.3 million users at risk, but that it leaked its own password

A new report filed with the Maine Attorney General puts the number of affected people at 1.3 million.