State now says 3.8 million tax records were hacked