Latvia’s road traffic agency confirmed that hackers stole data connected to about two-thirds of the country’s population in a major cyberattack that has prompted calls for senior officials to resign.

The Road Traffic Safety Directorate, known as CSDD, said Tuesday that its investigation found hackers had accessed data from payment receipts dating back to 2008. The breach affected records belonging to more than 1.2 million people and 200,000 businesses and other legal entities. Latvia has a population of just over 1.8 million.

CSDD is the state agency responsible for vehicle registration, driver’s licenses and other road safety services and operates under Latvia’s Transport Ministry.

The stolen information includes personal identification numbers or company registration numbers, vehicle license plate numbers, payment amounts and dates, as well as addresses listed on vehicle registration certificates.

CSDD said customer phone numbers and email addresses were not affected and that address information was incomplete in some records. Usernames and passwords were also not compromised.