Hackers who breached US government databases stole personal information of 21.5 million people, officials said Thursday following an investigation into the attack widely blamed on China.