OPM hack: 21 million people's personal information stolen, federal agency says