According to US prosecutors, the stolen money was first wired to the accounts in Latvia and Cyprus before being quickly transferred to other accounts worldwide, including some hosted in Slovakia, Lithuania, Hungary, and Hong Kong.