CHARLESTON, S.C. (AP) — Millions of Social Security numbers and business records from tax returns as far back as 1998 were hacked in South Carolina and experts said Wednesday it may be the largest cyber-attack against a state tax department in the nation’s history.

State and federal officials are investigating the hacking they say may have started in August and was discovered last month. They say the vulnerability in the system was fixed Oct. 20. The 3.6 million tax returns filed since 1998 included Social Security numbers and about 387,000 credit and debit card numbers that were also exposed, 6,000 of those unencrypted.