Two people are in police custody in connection with a cyber attack on one of South Korea’s largest phone companies and which resulted in personal information of 12 million customers being compromised.

The two, identified only as Kim and Park, made off with $10.8 million as a result of the February 2013 attack on KT Corp, according to CNN.

Citing a statement from Incheon Metropolitan Police Agency Commissioner Lee Sang-Won, CNN noted that Kim stole bank details other information, which he sold to Park, who owns a telemarketing business. Park then posed as a KT representative and used the purloined information to sell cell phones.

The company said it is cooperating with police to “minimize damage to its customers.” South Korean companies have fallen prey to hackers and other cyber criminals several times in the last year.