Dutch authorities arrested a hacker for obtaining and trying to sell the personal information of nearly every Austrian citizen in May 2020, according to Reuters. It includes almost nine million data sets, roughly lining up with Austria’s population.

The defendant, arrested in November in an Amsterdam apartment, was reportedly already known to international police. The 25-year-old defendant also offered “similar data sets” from Italy, the Netherlands and Colombia. Dutch police waited until now to announce the arrest to avoid hindering ongoing investigations.

Authorities say the hacker posted the information in an online forum. Police say the trove consists of “registration data,” essential info residents must provide to authorities. That includes their full name, address and date of birth — but not financial info, fortunately. Nevertheless, the police confirmed the material’s authenticity, adding that “since this data was freely available on the Internet, it must absolutely be assumed that these registration data are, in full or in part, irrevocably in the hands of criminals.”