Over many years, bank workers opened more than 2 million accounts and credit cards without customers' permission.