Regulators believe the attacks may have broadly scanned multiple financial companies for vulnerabilities