The suspect's group accumulated at least 50 million unique credentials from "millions of potential victims" worldwide, the DOJ said.