The hacker used stolen credentials from an official, the ministry said. Owners of the affected bank accounts will receive notifications in the coming days.