Two men held in Israel and a U.S. citizen believed to be living in Moscow have been charged in the largest theft of consumer data from a U.S. financial institution in history, according to a federal indictment.

Most of the theft of personal information from more than 100 million customers came with a summer 2014 attack against JPMorgan Chase, the nation’s biggest bank by assets, the Southern District U.S. Attorney’s Office said.