The pair used customer data to access bank accounts and steal cash