The perpetrators told the BBC Russian Service they had details from a total of 120 million accounts.