Two men are in custody and a third is on the run after allegedly hacking banking giant JPMorgan Chase & Co. in the largest bank breach in history.

From 2012 to 2015, the men allegedly stole information from more than 100 million customers, Bloomberg reports.

Among the other victims is a major business news publication, according to an indictment released Tuesday. Patricia Wexler, spokeswoman for JPMorgan, could confirm only that JPMorgan is one of the victims.

“I can confirm officially that we’re victim number one referenced in the indictment,” Wexler said. As for the news publication, “We’re all speculating and trying to guess, but I don’t have anything official,” she added.

Online brokerage Scottrade and finance publishing house Dow Jones also claim to have been victims.