At least 2.07 million sets of personal data were stolen or feared leaked from 140 companies and other organizations in Japan that said they were hit by cyberattacks in 2015, according to a Kyodo News survey.

Of the 140 victims, 75 said they noticed the data breaches only after police or another outside group alerted them. The victims consist of 69 private companies, 49 government agencies and their affiliates, and 22 universities.

Among the remaining 65 organizations, 40 said they discovered on their own that they had been targeted.