According to an amended complaint filed Thursday, the hackers used a number of unlawful means to obtain customer log-in information, such as usernames and passwords, to steal millions of dollars.
The government says no wider data breaches are alleged to have occurred.
Eight people are charged in the scheme.
Customer accounts were targeted at Aon Hewitt, Automated Data Processing Inc., Citibank, E-Trade, Electronic Payments Inc., Fundtech Holdings LLC, iPayment Inc., JPMorgan Chase Bank, Nordstrom Bank, PayPal, TD Ameritrade, TIAA-CREF, USAA, Veracity Payment Solutions Inc. and the payroll arm of the U.S. Department of Defense.
For details of the latest launches and news from Samsung, Xiaomi, Realme, OnePlus, Oppo and other companies at the Mobile World Congress in Barcelona, visit our MWC 2026 hub.
Honor 600 Lite Launched With MediaTek Dimensity 7100 Elite, 6,520mAh Battery: Price, Specifications
MWC 2026: Oppo, MediaTek Join Hands to Showcase New On-Device AI Capabilities for Future Smartphones