Iranian student hackers who call themselves the Cyber Warriors Team say they exploited a vulnerability in the NASA website to steal personal information on thousands of researchers at the U.S. space agency, reports.

In a post on titled “How and reasons to Hack NASA SSL Certificate,” the hackers said they had used a secure sockets layer (SSL) vulnerability that still exists on the website, leaving NASA open to more malicious attacks.

The Cyber Warriors Team claimed to have swiped “information for thousands of NASA researcher[s] with emails and accounts of other users.”