The personal data of four million US government workers may now be in the hands of Chinese hackers