OP was incorrect about the year - it was 2013. The OPM breach included ANYONE who filled out/submitted an SF86 form to the USG. I believe fingerprint data was compromised at all - our (US) government flopped real hard on this issue and put millions of people's personal information into the wild.