The Internal Revenue Service has announced that the number of taxpayers impacted by a cyberbreach is worse than initially thought. There could be some 390,000 taxpayer accounts involved—as the agency struggles to improve its image after several controversies.

The new estimate is broken down to 220,000 taxpayer households “where there were instances of possible or potential access,” according to an IRS statement. It also includes 170,000 instances of “suspected attempts that failed to clear the authentication processes.”