Target security breach may be much bigger