If true, the actions could constitute one of the "largest known data breaches in American history," Sen. Ron Wyden warned.