Data for 2.9 million bank members was taken from the bank's system by a now-fired employee.