Tens of citizens' personal information may have been exposed.