And you can be sure it contains a whole lot of other personal information, such as medical records, addresses, etc. Simple "identity theft" for the usual purposes is the least of the worries of those whose records have been stolen, because most major credit card companies do not hold their clients responsible for unauthorized purchases. A government computer disk like this was almost certainly stolen from within the government for political purposes, such as reprisals against political foes; and that could mean any FReeper or blogger anywhere who makes posts against any government official.
Any idea how far back the data goes?
Back to the 60s, possibly?