How hackers made off with millions