Shortly after news broke about a massive breach at the Office of Personnel Management (OPM) impacting as many as 18 million federal employees, a new report raises further cyber-related concerns about the presence of federal government credentials on the open web.

Recorded Future, which is a threat intelligence company, warns in the new report that the presence of federal worker emails and passwords mean that many government agencies and their employees can become “vulnerable to espionage, socially engineered attacks, and tailored spear-phishing attacks.”